Jump to content

Free help from tech experts
Welcome to Geeks to Go forums. Create an account now to gain access to all our features. Once registered and logged in, you will be able to create topics, post replies to existing topics, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. Best of all, registration and all assistance is 100% free! This message, and all ads will be removed once you have signed in.
Sign In Create Account

Yuyun_Cantix, VBS/Autorun.UC


  • Please log in to reply

#1
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello.

I spent the last weeks in a developing country, and computer security with some companies did not (really) match our standard. Anyhow, I foolishly connected my external drive to a PC's down there to copy some folders. After reconnecting the drive to my Laptop, the files on it had been hidden and are (up to now) no longer accessible. (Error: Following File can't be opened xxx.Ink, Please choose, etc.)

Found this page today and thought I could manage my problem by solely following instruction within this topic:

http://www.geekstogo...ty-t272616.html
(VBS/Autorun.worm.zo, Yuyun_Cantix and no connectivity., Plus a bunch of other issues.)

However, the problems that I face seem to be different, due to the fact that Yuyun_Cantix deploys corrupted files in random/different folders, maybe.

-- I have been running Avira AntiVir on my local drive (C:) and I believe it succesfully deleted all the .ink and .tb files that had been installed on the system.
Many Baca.rtf, My name is Yuyun.rtf, etc. files remain on the local drive though.

I ran Desinfec't 8 on my external Drive, it detected and quarantined plenty, however, files on the ext. drive remain hidden.


Help would be much, much appreciated!
I am of course happy to help with whatever information needed.

XP, HE
2002
SP 2

Best regards,
Lucas

Edited by ldeecke, 15 April 2010 - 05:25 AM.

  • 0

Similar Topics: Yuyun_Cantix, VBS/Autorun.UC     x


#2
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
-

Edited by ldeecke, 18 April 2010 - 11:24 AM.

  • 0

#3
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello.

I followed the instructions on Malware and Spyware Cleaning Guide (As demanded in this thread: http://www.geekstogo...l#entry1810232).
The issue of files on my external harddrive being unaccessible persists, however.

I will attach:
1.MBAM Log

2.GMER Log

3.1 OTL Log, OTL.txt
3.2 OTL Log, Extras.txt

Thanks for help in advance,
Best regards.
Lucas.

----------------------------------------------

1 MBAM

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Datenbank Version: 4003

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

18.04.2010 15:46:24
mbam-log-2010-04-18 (15-46-24).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 106071
Laufzeit: 6 Minute(n), 48 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 2
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS\ImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemRoot%\system32\svchost.exe -k netsvcs) Good: (%SystemRoot%\System32\svchost.exe -k netsvcs) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv\ImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemroot%\system32\svchost.exe -k netsvcs) Good: (%SystemRoot%\System32\svchost.exe -k netsvcs) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)



----------------------------------------------

2 GMER

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-18 18:58:58
Windows 5.1.2600 Service Pack 2
Running: 4s1c79gs.exe; Driver: C:\DOKUME~1\LUCASD~1\LOKALE~1\Temp\pfldapow.sys


---- System - GMER 1.0.15 ----

SSDT F7D99366 ZwCreateKey
SSDT F7D9935C ZwCreateThread
SSDT F7D9936B ZwDeleteKey
SSDT F7D99375 ZwDeleteValueKey
SSDT spyv.sys ZwEnumerateKey [0xF7562CA2]
SSDT spyv.sys ZwEnumerateValueKey [0xF7563030]
SSDT F7D9937A ZwLoadKey
SSDT spyv.sys ZwOpenKey [0xF75440C0]
SSDT F7D99348 ZwOpenProcess
SSDT F7D9934D ZwOpenThread
SSDT spyv.sys ZwQueryKey [0xF7563108]
SSDT spyv.sys ZwQueryValueKey [0xF7562F88]
SSDT F7D99384 ZwReplaceKey
SSDT F7D9937F ZwRestoreKey
SSDT F7D99370 ZwSetValueKey

INT 0x01 \SystemRoot\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) F60824F6
INT 0x03 \SystemRoot\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) F608259C
INT 0x62 ? 86F6CBF8
INT 0x63 ? 86FD6BF8
INT 0x83 ? 86FD6BF8
INT 0xA4 ? 86FD6BF8
INT 0xB4 ? 86FD6BF8

---- Kernel code sections - GMER 1.0.15 ----

.text ntoskrnl.exe!_abnormal_termination + 168 804E27C4 2 Bytes [A2, 2C]
.text ntoskrnl.exe!_abnormal_termination + 16B 804E27C7 1 Byte [F7]
.text ntoskrnl.exe!_abnormal_termination + 2CC 804E2928 2 Bytes [08, 31] {OR [ECX], DH}
.text ntoskrnl.exe!_abnormal_termination + 2CF 804E292B 1 Byte [F7]
.text ntoskrnl.exe!_abnormal_termination + 310 804E296C 2 Bytes [88, 2F] {MOV [EDI], CH}
.text ...
? bucdno.sys Das System kann die angegebene Datei nicht finden. !
? spyv.sys Das System kann die angegebene Datei nicht finden. !
.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xF5F0C000, 0x175176, 0xE8000020]
.text USBPORT.SYS!DllUnload F5EEC62C 5 Bytes JMP 86FD61D8
.text ad7ykdtr.SYS F5C94384 1 Byte [20]
.text ad7ykdtr.SYS F5C94384 37 Bytes [20, 00, 00, 68, 00, 00, 00, ...]
.text ad7ykdtr.SYS F5C943AA 24 Bytes [00, 00, 20, 00, 00, E0, 00, ...]
.text ad7ykdtr.SYS F5C943C4 3 Bytes [00, 00, 00]
.text ad7ykdtr.SYS F5C943C9 1 Byte [00]
.text ...
.text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xEB0F2300, 0x3ACC8, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xF7A6C300, 0x1B7E, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Programme\Mozilla Firefox\firefox.exe[2672] WS2_32.dll!connect 71A1406A 5 Bytes JMP 037627A0 C:\Programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabKernel.dll
.text C:\Programme\Mozilla Firefox\firefox.exe[2672] WS2_32.dll!WSARecv 71A14318 5 Bytes JMP 037636F0 C:\Programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabKernel.dll
.text C:\Programme\Mozilla Firefox\firefox.exe[2672] WS2_32.dll!WSASend 71A16233 5 Bytes JMP 037633B0 C:\Programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabKernel.dll
.text C:\Programme\Mozilla Firefox\firefox.exe[2672] WS2_32.dll!WSAConnect 71A20C69 5 Bytes JMP 037628D0 C:\Programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabKernel.dll

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 86F6B1F8
Device \FileSystem\Fastfat \FatCdrom 86B7A500

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device \Driver\usbuhci \Device\USBPDO-0 86BD7500
Device \Driver\usbuhci \Device\USBPDO-1 86BD7500
Device \Driver\usbuhci \Device\USBPDO-2 86BD7500
Device \Driver\usbuhci \Device\USBPDO-3 86BD7500
Device \Driver\usbehci \Device\USBPDO-4 86B43408
Device \Driver\PCI_PNP6576 \Device\00000056 spyv.sys
Device \Driver\Ftdisk \Device\HarddiskVolume1 86FD81F8
Device \Driver\Ftdisk \Device\HarddiskVolume2 86FD81F8
Device \Driver\Cdrom \Device\CdRom0 86B32500
Device \Driver\Cdrom \Device\CdRom1 86B32500
Device \Driver\atapi \Device\Ide\IdePort0 86F6C1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 86F6C1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c 86F6C1F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{817DB1A3-9A66-44E4-8CA3-C6B979676022} 86B46500
Device \Driver\NetBT \Device\NetBt_Wins_Export 86B46500
Device \Driver\sptd \Device\4218296576 spyv.sys
Device \Driver\NetBT \Device\NetbiosSmb 86B46500
Device \Driver\USBSTOR \Device\00000094 86AA1500
Device \Driver\USBSTOR \Device\00000095 86AA1500
Device \Driver\usbuhci \Device\USBFDO-0 86BD7500
Device \Driver\usbuhci \Device\USBFDO-1 86BD7500
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 86B5D500
Device \Driver\usbuhci \Device\USBFDO-2 86BD7500
Device \FileSystem\MRxSmb \Device\LanmanRedirector 86B5D500
Device \Driver\usbuhci \Device\USBFDO-3 86BD7500
Device \Driver\usbehci \Device\USBFDO-4 86B43408
Device \Driver\Ftdisk \Device\FtControl 86FD81F8
Device \Driver\ad7ykdtr \Device\Scsi\ad7ykdtr1 86BB7500
Device \Driver\ad7ykdtr \Device\Scsi\ad7ykdtr1Port1Path0Target0Lun0 86BB7500
Device \FileSystem\Fastfat \Fat 86B7A500

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\Cdfs \Cdfs 86AA4500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 898317890
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 1587114041
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 2
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x07 0x23 0x96 0xE6 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\Daemontools Light\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4B 0xC1 0xBC 0x56 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xF5 0x62 0x95 0x31 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x70 0x28 0x5A 0x49 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x07 0x23 0x96 0xE6 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\Daemontools Light\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4B 0xC1 0xBC 0x56 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xF5 0x62 0x95 0x31 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x70 0x28 0x5A 0x49 ...
Reg HKLM\SOFTWARE\Classes\ComProxy.IIDCRLWrapper\CLSID@ {CD79C623-E1B7-47CF-A685-2E8A882BA3F8}
Reg HKLM\SOFTWARE\Classes\ComProxy.IIDCRLWrapper\CurVer@ ComProxy.IIDCRLWrapper.1
Reg HKLM\SOFTWARE\Classes\ComProxy.IIDCRLWrapper.1\CLSID@ {CD79C623-E1B7-47CF-A685-2E8A882BA3F8}

---- EOF - GMER 1.0.15 ----

----------------------------------------------

3.1 OTL, OTL.txt

OTL logfile created on: 18.04.2010 19:00:33 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Dokumente und Einstellungen\Lucas Deecke\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1.022,00 Mb Total Physical Memory | 387,00 Mb Available Physical Memory | 38,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 67,28 Gb Total Space | 1,52 Gb Free Space | 2,26% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 232,83 Gb Total Space | 141,54 Gb Free Space | 60,79% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LDEECKE
Current User Name: Lucas Deecke
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010.04.14 10:23:40 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
PRC - [2010.03.16 17:36:32 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.03.02 12:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.02.24 11:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2010.01.14 23:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009.05.29 13:41:26 | 000,144,712 | ---- | M] (Apple Inc.) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009.01.26 16:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2007.08.09 09:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2007.06.13 15:21:45 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005.08.18 10:33:26 | 001,933,312 | ---- | M] () -- C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe
PRC - [2005.06.27 19:30:06 | 000,360,448 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Programme\Samsung\MagicKBD\MagicKBD.exe
PRC - [2005.05.28 08:35:56 | 000,036,864 | R--- | M] () -- C:\Programme\Samsung\Samsung Network Manager\SNMWLANService.exe
PRC - [2005.01.28 16:35:58 | 000,434,176 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\SetPoint\SetPoint.exe
PRC - [2004.12.10 14:45:26 | 000,049,152 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE
PRC - [2004.07.27 13:48:04 | 001,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
PRC - [2002.09.20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe


========== Modules (SafeList) ==========

MOD - [2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
MOD - [2006.08.25 17:46:44 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2005.01.28 16:34:04 | 000,057,344 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\SetPoint\lgscroll.dll
MOD - [2005.01.28 16:31:34 | 000,045,056 | ---- | M] () -- C:\Programme\Logitech\SetPoint\gamehook.dll
MOD - [2003.03.18 22:14:52 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcp71.dll
MOD - [2003.02.21 06:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll


========== Win32 Services (SafeList) ==========

SRV - [2010.03.16 17:36:32 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (antivirservice)
SRV - [2010.02.24 11:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (antivirschedulerservice)
SRV - [2009.05.29 13:41:26 | 000,144,712 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2007.10.25 16:27:54 | 000,266,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc)
SRV - [2007.08.09 09:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2006.10.29 15:53:32 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2005.05.28 08:35:56 | 000,036,864 | R--- | M] () [Auto | Running] -- C:\Programme\samsung\Samsung Network Manager\SNMWLANService.exe -- (SNM WLAN Service)
SRV - [2005.04.04 02:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)
SRV - [2002.12.17 17:23:30 | 000,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)
SRV - [2002.09.20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.11
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.18
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.1
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.4
FF - prefs.js..extensions.enabledItems: {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.1
FF - prefs.js..network.proxy.ftp: "200.78.117.242"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "200.78.117.242"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "200.78.117.242"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.socks: "200.78.117.242"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "200.78.117.242"
FF - prefs.js..network.proxy.ssl_port: 3128


FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.04.14 10:23:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.04.14 10:23:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\mozilla thunderbird 3.0.1\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.01.29 20:33:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\mozilla thunderbird 3.0.1\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2009.11.29 17:01:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\thunderbird\extensions\\eplgTb@eset.com: C:\Programme\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2010.01.29 20:34:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Extensions
[2010.01.29 20:34:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.04.18 15:09:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions
[2010.01.28 15:56:59 | 000,000,000 | ---D | M] (All-in-One Sidebar) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d}
[2010.04.14 19:31:01 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2009.11.30 14:46:14 | 000,000,000 | ---D | M] (PDF Download) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}
[2010.04.13 17:43:39 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010.04.14 19:30:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2009.03.30 19:38:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\moveplayer@movenetworks.com
[2007.07.25 15:22:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Sunbird\Profiles\a161j38o.default\extensions
[2008.08.20 13:07:23 | 000,001,660 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\leo-deu-eng.xml
[2008.08.19 18:16:10 | 000,001,141 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\wikipedia-de.xml
[2008.09.10 00:00:59 | 000,001,334 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\wiktionary-de.xml
[2010.04.18 15:09:28 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2007.05.08 22:42:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
[2004.08.04 16:00:00 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Programme\Mozilla Firefox\plugins\msvcp60.dll
[2006.10.26 23:13:26 | 000,049,152 | ---- | M] (BitTorrent, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npbittorrent.dll
[2005.12.22 20:14:00 | 000,245,830 | ---- | M] (C Systems - Creative Software Solutions since 1996) -- C:\Programme\Mozilla Firefox\plugins\npUMediaPlayer.dll
[2007.03.10 01:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Programme\Mozilla Firefox\plugins\npyaxmpb.dll
[2010.04.14 10:23:50 | 000,001,538 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010.04.14 10:23:50 | 000,000,947 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010.04.14 10:23:50 | 000,000,769 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010.04.14 10:23:51 | 000,000,831 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Octh Class) - {000123b4-9b42-4900-b3f7-f4b073efc214} - C:\Programme\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (no name) - {B42824CE-A805-3B37-BF74-C19B93CF24C7} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [AtiPTA] C:\WINDOWS\System32\atiptaxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BatteryManager] C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe ()
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [MagicKeyboard] C:\Programme\Samsung\MagicKBD\PreMKbd.exe ()
O4 - HKLM..\Run: [RestoreIT!] C:\Programme\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE (FarStone Tech. Inc.)
O4 - HKLM..\Run: [SoundMAX] C:\Programme\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKLM..\RunOnce: [InnoSetupRegFile.0000000001] C:\WINDOWS\is-823NK.exe File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\Lucas Deecke\Startmenü\Programme\Autostart\Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O8 - Extra context menu item: &download by arles download manager - C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Ariel Download Manager\ADM.htm ()
O8 - Extra context menu item: &download by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &grab video by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: do&wnload selected by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: down&load all by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\npjpi160_02.dll (Sun Microsystems, Inc.)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\Partypoker\PartyPoker\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\Partypoker\PartyPoker\RunApp.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.micr...heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.ma...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} http://pdl.stream.ao.../ampx_en_dl.cab (IWinAmpActiveX Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\atiextevent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.08.30 10:33:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008.05.30 09:31:56 | 000,000,054 | -H-- | M] () - F:\autorun.in_2.org -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: Ias - C:\WINDOWS\system32\ias [2005.08.30 10:32:32 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (1128897794015232)

========== Files/Folders - Created Within 14 Days ==========

[2010.04.18 12:31:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.04.18 12:31:20 | 000,000,000 | ---D | C] -- C:\Programme\ERUNT
[2010.04.18 12:30:46 | 000,791,393 | ---- | C] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\erunt_setup.exe
[2010.04.17 18:04:16 | 002,590,584 | ---- | C] (www.orbitdownloader.com ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OrbitDownloaderSetup.exe
[2010.04.13 17:44:50 | 000,999,160 | ---- | C] (BillP Studios) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\wpsetup.exe
[2010.04.13 17:43:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
[2010.04.13 17:35:20 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.04.13 17:31:20 | 000,444,416 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\TFC.exe
[2010.04.13 17:20:45 | 000,561,664 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
[2010.04.13 16:43:55 | 001,433,289 | ---- | C] (Old McDonald's Farm) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\aesetup2.4.exe
[2010.04.12 19:31:05 | 000,000,000 | ---D | C] -- C:\INFECTED
[2010.01.05 18:07:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\ESET
[2008.07.04 10:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2007.08.14 12:36:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Apple
[2006.02.19 04:28:56 | 000,012,288 | ---- | C] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\Fonts\RandFont.dll
[2005.08.30 10:38:14 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft
[2005.08.30 10:38:13 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft
[2005.08.30 10:38:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft

========== Files - Modified Within 14 Days ==========

[2010.04.18 15:36:16 | 000,001,543 | ---- | M] () -- C:\WINDOWS\System32\Lucas Deecke_KBD.ini
[2010.04.18 15:21:37 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.18 15:21:34 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.18 15:21:31 | 1071,894,528 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.18 15:20:26 | 013,631,488 | -H-- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\NTUSER.DAT
[2010.04.18 15:20:26 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.ini
[2010.04.18 12:30:47 | 000,791,393 | ---- | M] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\erunt_setup.exe
[2010.04.17 18:06:57 | 002,590,584 | ---- | M] (www.orbitdownloader.com ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OrbitDownloaderSetup.exe
[2010.04.17 18:05:16 | 091,985,256 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Franco_Cinelli--Acid_Tracks-(TRAUT004)-WEB-2009-SiBERiA.rar.ob!
[2010.04.17 14:34:53 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.16 02:14:43 | 001,576,930 | -H-- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.04.14 08:01:27 | 000,439,676 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2010.04.14 08:01:27 | 000,424,052 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.04.14 08:01:27 | 000,084,978 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2010.04.14 08:01:27 | 000,071,488 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.04.14 08:01:26 | 001,032,216 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.04.13 19:50:55 | 000,039,411 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\virus.jpg
[2010.04.13 17:44:53 | 000,999,160 | ---- | M] (BillP Studios) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\wpsetup.exe
[2010.04.13 17:31:22 | 000,444,416 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\TFC.exe
[2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
[2010.04.13 16:44:08 | 001,433,289 | ---- | M] (Old McDonald's Farm) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\aesetup2.4.exe
[2010.04.13 16:36:47 | 045,942,928 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\setup_av462_free.exe
[2010.04.11 12:39:18 | 000,101,888 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.10 18:35:10 | 000,222,724 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\tbd.jpg

========== Files Created - No Company Name ==========

[2010.04.17 18:03:42 | 091,985,256 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Franco_Cinelli--Acid_Tracks-(TRAUT004)-WEB-2009-SiBERiA.rar.ob!
[2010.04.13 19:50:45 | 000,039,411 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\virus.jpg
[2010.04.13 16:33:57 | 045,942,928 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\setup_av462_free.exe
[2010.04.10 18:35:10 | 000,222,724 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\tbd.jpg
[2010.04.01 10:39:42 | 000,001,433 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\My name is Yuyun.rtf
[2010.04.01 10:39:42 | 000,001,433 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Baca AQ.rtf
[2010.04.01 10:39:13 | 000,001,433 | ---- | C] () -- C:\Programme\My name is Yuyun.rtf
[2010.04.01 10:39:13 | 000,001,433 | ---- | C] () -- C:\Programme\Baca AQ.rtf
[2010.04.01 10:39:04 | 000,001,433 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\My name is Yuyun.rtf
[2010.04.01 10:39:04 | 000,001,433 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Baca AQ.rtf
[2010.04.01 10:39:01 | 000,001,433 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\My name is Yuyun.rtf
[2010.04.01 10:39:01 | 000,001,433 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Baca AQ.rtf
[2010.03.31 20:37:35 | 000,000,529 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment
[2010.03.31 20:37:35 | 000,000,525 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared
[2010.03.31 20:37:35 | 000,000,501 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\AVSMedia
[2010.03.31 20:37:35 | 000,000,495 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Apple
[2010.03.31 20:37:35 | 000,000,495 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Adobe
[2010.03.31 20:37:34 | 000,000,531 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\New Harry Potter and....lnk
[2010.03.31 20:37:05 | 000,000,525 | ---- | C] () -- C:\Programme\New Harry Potter and....lnk
[2010.03.31 20:37:05 | 000,000,521 | ---- | C] () -- C:\Programme\Apple Software Update
[2010.03.31 20:37:05 | 000,000,507 | ---- | C] () -- C:\Programme\Analog Devices
[2010.03.31 20:37:05 | 000,000,493 | ---- | C] () -- C:\Programme\Alcohol
[2010.03.31 20:37:05 | 000,000,493 | ---- | C] () -- C:\Programme\Ableton
[2010.03.31 20:37:05 | 000,000,489 | ---- | C] () -- C:\Programme\Adobe
[2010.03.31 20:36:56 | 000,000,517 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Application Data
[2010.03.31 20:36:56 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten
[2010.03.31 20:36:56 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\.limewire
[2010.03.31 20:36:56 | 000,000,501 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Contacts
[2010.03.31 20:36:56 | 000,000,499 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Cookies
[2010.03.31 20:36:46 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Favoriten
[2010.03.31 20:36:46 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente
[2010.03.31 20:36:46 | 000,000,491 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\DRM
[2010.03.31 20:36:45 | 000,000,531 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\New Harry Potter and....lnk
[2010.03.31 20:36:45 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten
[2010.03.31 20:36:45 | 000,000,499 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop
[2009.12.23 12:44:37 | 000,000,000 | ---- | C] () -- C:\Programme\Malware
[2009.09.04 16:51:10 | 000,017,162 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\hs_err_pid5248.log
[2009.02.26 17:56:51 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.01.14 23:36:24 | 000,000,211 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\AVSMediaPlayer.m3u
[2008.04.20 15:19:30 | 000,002,686 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\_GEAREXT.WO_IDENT.TXT
[2008.03.03 10:39:28 | 000,000,145 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008.03.03 10:21:39 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008.03.03 10:21:16 | 000,000,140 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2008.03.03 10:20:00 | 000,000,957 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2008.03.03 10:05:23 | 000,001,076 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log
[2007.12.10 20:20:06 | 000,001,359 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache
[2007.06.07 00:49:09 | 000,000,050 | ---- | C] () -- C:\WINDOWS\StreamRipper32.INI
[2007.06.07 00:41:33 | 000,000,357 | ---- | C] () -- C:\WINDOWS\sripper.ini
[2007.05.08 14:51:31 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2007.04.21 00:48:44 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2007.04.20 09:31:20 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2007.04.19 12:03:56 | 000,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2007.04.19 12:03:56 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2007.02.08 15:31:20 | 000,001,413 | ---- | C] () -- C:\WINDOWS\System32\WLAN.INI
[2007.02.08 15:26:33 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\IsUser11b.dll
[2006.11.27 00:35:13 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI
[2006.11.20 20:15:35 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2006.11.20 20:15:35 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2006.11.17 20:06:26 | 000,135,419 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\AdobeFnt10.lst
[2006.10.25 23:44:18 | 000,101,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.10.25 23:02:11 | 000,001,543 | ---- | C] () -- C:\WINDOWS\System32\Lucas Deecke_KBD.ini
[2006.10.25 23:01:48 | 013,631,488 | -H-- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\NTUSER.DAT
[2006.10.25 23:01:48 | 000,001,024 | -H-- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.dat.LOG
[2006.10.25 23:01:48 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.ini
[2006.10.25 23:01:36 | 000,262,144 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\NTUSER.DAT
[2006.10.25 23:01:36 | 000,001,024 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\NTUSER.DAT.LOG
[2006.05.11 11:26:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006.03.31 23:00:35 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.ini
[2005.09.03 15:38:37 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2005.08.30 19:19:29 | 000,000,638 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005.08.30 19:18:48 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2005.08.30 10:44:34 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI
[2005.08.30 10:44:32 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI
[2005.08.30 10:44:32 | 000,002,700 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI
[2005.08.30 10:44:32 | 000,002,596 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI
[2005.08.30 10:44:32 | 000,002,554 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI
[2005.08.30 10:44:32 | 000,002,461 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI
[2005.08.30 10:44:32 | 000,002,237 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI
[2005.08.30 10:44:32 | 000,001,886 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI
[2005.08.30 10:44:32 | 000,001,820 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI
[2005.08.30 10:44:32 | 000,001,811 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI
[2005.08.30 10:44:32 | 000,001,690 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI
[2005.08.30 10:44:32 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI
[2005.08.30 10:44:32 | 000,001,332 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI
[2005.08.30 10:44:31 | 000,001,690 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI
[2005.08.30 10:44:26 | 000,043,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\RITCPT.SYS
[2005.08.30 10:44:16 | 000,005,088 | ---- | C] () -- C:\WINDOWS\System32\drivers\FBAPI.sys
[2005.08.30 10:43:12 | 000,004,300 | ---- | C] () -- C:\WINDOWS\System32\MEMIO.SYS
[2005.07.08 19:21:48 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\AVS3_Resource.dll
[2005.06.08 16:58:10 | 000,017,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWFilter.sys
[2005.06.08 16:58:08 | 000,035,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys
[2005.06.08 16:58:08 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys
[2005.04.11 10:12:52 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImageIODll.dll
[2005.04.11 10:12:50 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ImageAlbumSave.dll
[2005.02.26 13:33:04 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\AVSAudioWideStereoDMO.dll
[2001.07.07 04:00:00 | 000,003,254 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

========== LOP Check ==========

[2009.04.09 14:02:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ableton
[2010.01.05 16:26:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ESET
[2007.07.27 22:51:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HSETU
[2007.04.08 20:39:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Marginal Team
[2007.07.12 18:33:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
[2008.12.24 21:21:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Native Instruments
[2008.06.28 16:50:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Pinnacle
[2005.08.30 11:14:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung Electronics
[2008.11.15 11:15:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2006.12.04 17:05:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online DSL-Manager
[2009.12.23 12:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2007.11.01 16:44:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2009.03.22 01:44:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2008.11.08 17:17:52 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{24E3A4D8-9E57-4B19-9715-6E61513095D7}
[2009.07.08 12:13:56 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{2ED18044-7049-4E7A-A58D-4017348FCDB7}
[2008.12.24 21:24:37 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{3689B77C-90FA-4663-91AB-5AB34383CD81}
[2009.07.08 11:57:07 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{56451EE1-D56A-4F15-9716-206EC42A2BEE}
[2009.09.20 10:52:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.04.07 11:49:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009.07.08 12:12:53 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{902029B2-957E-4066-85FA-30DA31731718}
[2009.04.09 14:50:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Ableton
[2009.03.25 16:07:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Acreon
[2006.11.06 19:13:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\BitTorrent
[2008.04.06 15:21:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\DAEMON Tools
[2009.09.29 15:46:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\dBpoweramp
[2006.11.09 18:35:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\FlashFXP
[2010.03.03 18:36:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\GrabPro
[2009.09.21 00:06:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\IObit
[2007.04.08 18:57:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\IrfanView
[2006.11.20 01:36:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\MSNInstaller
[2009.02.09 07:44:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\OpenOffice.org
[2010.03.30 16:16:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Opera
[2010.04.17 18:12:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Orbit
[2007.03.31 14:45:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Publish Providers
[2010.04.13 18:44:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
[2005.08.30 11:14:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Samsung Electronics
[2008.06.28 17:17:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Sony
[2007.03.31 14:28:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Sony Setup
[2008.04.06 16:43:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Sports Interactive
[2008.07.06 18:42:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Steinberg
[2008.06.20 23:45:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\temp
[2010.01.29 20:33:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Thunderbird
[2008.05.22 22:10:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Tonium
[2007.11.01 16:41:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\TuneUp Software
[2010.04.14 20:42:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\uTorrent
[2010.02.12 19:15:00 | 000,000,410 | ---- | M] () -- C:\WINDOWS\Tasks\1-Klick-Wartung.job
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Tasks\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Tasks\My name is Yuyun.rtf
[2010.01.31 23:00:00 | 000,000,334 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: AGP440.SYS >
[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\I386_old\sp2.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\d7ca437757bb79190d8fe0f22734e38b\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\I386_old\sp2.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\d7ca437757bb79190d8fe0f22734e38b\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\atapi.sys

< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\SoftwareDistribution\Download\d7ca437757bb79190d8fe0f22734e38b\eventlog.dll
[2004.08.04 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2004.08.04 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2008.04.14 04:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\SoftwareDistribution\Download\d7ca437757bb79190d8fe0f22734e38b\netlogon.dll
[2004.08.04 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2004.08.04 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2008.04.14 04:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\SoftwareDistribution\Download\d7ca437757bb79190d8fe0f22734e38b\scecli.dll
[2004.08.04 14:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2004.08.04 14:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\system32\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2008.04.06 15:21:34 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2005.08.30 12:24:08 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2005.08.30 12:24:08 | 000,638,976 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2005.08.30 12:24:08 | 000,430,080 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\drivers\*.sys /90 >
[2010.02.16 15:24:01 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\drivers\avgntflt.sys
[2010.03.01 11:05:24 | 000,124,784 | ---- | M] (Avira GmbH) -- C:\WINDOWS\system32\drivers\avipbb.sys
[2010.03.30 02:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbam.sys
[2010.03.30 02:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

========== Alternate Data Streams ==========

@Alternate Data Stream - 131 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:05EE1EEF
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
< End of report >


----------------------------------------------

3.2 OTL, Extras.txt

OTL Extras logfile created on: 18.04.2010 19:00:33 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Dokumente und Einstellungen\Lucas Deecke\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1.022,00 Mb Total Physical Memory | 387,00 Mb Available Physical Memory | 38,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 67,28 Gb Total Space | 1,52 Gb Free Space | 2,26% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 232,83 Gb Total Space | 141,54 Gb Free Space | 60,79% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LDEECKE
Current User Name: Lucas Deecke
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
jsfile [edit] -- "C:\Programme\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1" (Macromedia, Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [addtoplaylistvlc] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [playwithvlc] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\FlashFXP\FlashFXP.exe" = C:\Programme\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (IniCom Networks, Inc.)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- File not found
"C:\Programme\Windows Live\Messenger\livecall.exe" = C:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- File not found

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\FlashFXP\FlashFXP.exe" = C:\Programme\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (IniCom Networks, Inc.)
"C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\utorrent.exe" = C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Programme\mIRC\mirc.exe" = C:\Programme\mIRC\mirc.exe:*:Enabled:mIRC -- (mIRC Co. Ltd.)
"D:\setup\HPZNET01.EXE" = D:\setup\HPZNET01.EXE:*:Enabled:hpznet01.exe -- File not found
"D:\setup\HPONICIFS01.EXE" = D:\setup\HPONICIFS01.EXE:*:Enabled:hponicifs01.exe -- File not found
"C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = C:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- File not found
"C:\Programme\Windows Live\Messenger\livecall.exe" = C:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone) -- File not found
"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Programme\devolo\informer\devinf.exe" = C:\Programme\devolo\informer\devinf.exe:*:Enabled:devolo Informer -- (devolo AG)
"C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\RatioMaster\RatioMaster.exe" = C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\RatioMaster\RatioMaster.exe:*:Enabled:Ratio Master -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft\Launcher.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft\BackgroundDownloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10257-enGB-ptr-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10257-enGB-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enGB-ptr-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enGB-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\Launcher.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\Launcher.exe:*:Enabled:Blizzard Launcher -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enGB-ptr-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enGB-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10392-to-0.2.2.10433-enGB-ptr-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10392-to-0.2.2.10433-enGB-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10433-to-0.2.2.10468-enGB-ptr-downloader.exe" = F:\Festplatte\Anwendungen\WOW\World of Warcraft Public Test\WoW-0.2.2.10433-to-0.2.2.10468-enGB-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- File not found
"C:\Programme\Orbitdownloader\orbitdm.exe" = C:\Programme\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
"C:\Programme\Orbitdownloader\orbitnet.exe" = C:\Programme\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{013cca52-da56-4133-ac2b-1988a9568c30}" = Native Instruments Audio 4 DJ Driver
"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow
"{0b8565ba-bad5-4732-b122-5fd78efc50a9}" = Native Instruments Service Center
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Systemsteuerung
"{0c34b801-6aec-4667-b053-03a67e2d0415}" = Apple Application Support
"{0F022A2E-7022-497D-90A5-0F46746D8275}" = Macromedia Extension Manager
"{1099EEAB-C4BC-4F66-980F-2269856A71CD}" = Native Instruments Traktor
"{13f3917b56cd4c25848bdc69916971bb}" = DivX Converter
"{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig
"{18d10072035c4515918f7e37eafaacfc}" = AutoUpdate
"{1f1c2dfc-2d24-3e06-bcb8-725134adf989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{28DA872A-0848-48CF-B749-19A198157A2A}" = mDriver
"{2aac4085-dcbf-417b-aebd-182197839240}" = Native Instruments Traktor
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java™ SE Runtime Environment 6
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
"{3fc7cbbc4c1e11dca1a752ea55d89593}" = DivX Version Checker
"{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1
"{44025BD7-AD10-4769-99AE-6378FD0303D6}" = Macromedia Dreamweaver 8
"{442427A3-8E71-4DBB-BA4B-2F2F387CB5F8}" = Samsung Theme
"{470BB39A-7231-4077-AD3D-86067AD04604}" = Native Instruments Audio 8 DJ Driver
"{4B5E34BE-B93B-488E-B776-509EA41A0F39}" = AVStation premium
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{5ee7d259-d137-4438-9a5f-42f432ec0421}" = VC80CRTRedist - 8.0.50727.4053
"{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Samsung Battery Manager
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71A41426-C7A4-4DCF-A9ED-C5B4B105ED1D}" = Sony Media Manager 2.2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}" = Windows Live installer
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{81e76de9-bbcb-449c-91bb-6e4e5436d496}" = Adobe Audition 1.0
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver for Mobile
"{8adfc4160d694100b5b8a22de9dcabd9}" = DivX Player
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v3
"{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
"{9A174DB5-0B95-46B1-A787-341DF14AB2D5}" = Samsung Smart Screen
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C9D0F85-5658-4A5E-95A9-65F7DB2916EE}" = Broadcom 440x 10/100 Integrated Controller
"{A15E5EFD-76D7-4006-B7A5-8FBD86449BCB}" = IEEE 802.11 Wireless Lan Driver
"{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices
"{a429c2ae-ebf1-4f81-a221-1c115caaddad}" = QuickTime
"{A5F483F0-2D79-4FCA-AE09-D0D96E23EBF7}" = Samsung Update Plus
"{a96e97134ca649888820bcde5e300bbd}" = H.264 Decoder
"{A999CE76-D054-4684-80C7-53FC9243E019}" = EasyBox
"{AAB9478F-DE6B-498B-9420-21E1F1AC700D}" = WOW XT and TSXT Filter Driver
"{aac389499aef40428987b3d30cfc76c9}" = MKV Splitter
"{aadea55d-c834-4bcb-98a3-4b8d1c18f4ee}" = Apple Mobile Device Support
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1031-7B44-A70800000002}" = Adobe Reader 7.0.8 - Deutsch
"{aef9dc35addf4825b049acbfd1c6eb37}" = AAC Decoder
"{b13a7c41581b411290fbc0395694e2a9}" = DivX Converter
"{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig
"{b4092c6d-e886-4cb2-ba68-fe5a88d31de6}_is1" = Spybot - Search & Destroy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config
"{b7050cbdb2504b34bc2a9ca0a692cc29}" = DivX Plus Web Player
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}" = HP Software Update
"{BD723E53-A42C-4702-AA04-1D74A0311590}" = Magic Keyboard
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery
"{C7EEF2B9-8C16-4A04-B98D-B1A952A47E55}" = Linksys Wireless-G USB Network Adapter
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{da34fe93-5dc5-48e0-acc8-a5389e05bb51}" = iTunes
"{DD4B6FB8-8A28-4E21-B21B-3DA352DB2AEF}" = Samsung Command Center
"{DEA48EFD-22C1-4CD6-B887-EB2E6B2E4735}" = Samsung Network Manager 2.0
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{E9A5B341-167D-4042-8854-46F671F94049}" = Medieval CUE Splitter
"{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"{FE7E1DD7-EBCE-4696-ADE2-22BDBF2372DA}" = DocumentViewer
"Ad-Aware SE Personal" = Ad-Aware SE Personal
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player
"Agere Systems Soft Modem" = SENS LT56ADW Modem
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"amana screen saver_is1" = amana screen saver 1.1
"ATI Display Driver" = ATI Display Driver (Omega 3.8.442)
"Audacity_is1" = Audacity 1.2.6
"AVIcodec" = AVIcodec (remove only)
"avira antivir desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner (remove only)
"dbpoweramp dsp effects" = dBpoweramp DSP Effects
"dbpoweramp music converter" = dBpoweramp Music Converter
"divx plus directshow filters" = DivX Plus DirectShow Filters
"dlanconf" = devolo dLAN-Konfigurationsassistent
"dslmon" = devolo Informer
"ERUNT_is1" = ERUNT 1.1j
"Free Audio Converter_is1" = Free Audio Converter version 1.1
"free youtube to mp3 converter_is1" = Free YouTube to Mp3 Converter version 3.1
"hon" = Heroes of Newerth
"HP Document Viewer" = HP Document Viewer 7.0
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Photo & Imaging" = HP Photosmart Premier Software 6.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"HPOCR" = OCR Software by I.R.I.S 7.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{442427A3-8E71-4DBB-BA4B-2F2F387CB5F8}" = Samsung Theme
"InstallShield_{4B5E34BE-B93B-488E-B776-509EA41A0F39}" = AVStation premium
"InstallShield_{A5F483F0-2D79-4FCA-AE09-D0D96E23EBF7}" = Samsung Update Plus
"InstallShield_{DD4B6FB8-8A28-4E21-B21B-3DA352DB2AEF}" = Samsung Command Center
"InstallShield_{DEA48EFD-22C1-4CD6-B887-EB2E6B2E4735}" = Samsung Network Manager 2.0
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.6.2 (Standard)
"Live 7.0.3" = Live 7.0.3
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"mIRC" = mIRC
"Mozilla Firefox (3.5.9)" = Mozilla Firefox (3.5.9)
"mozilla thunderbird (3.0.1)" = Mozilla Thunderbird (3.0.1)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MultiRes (remove only)" = MultiRes (remove only)
"native instruments audio 4 dj driver" = Native Instruments Audio 4 DJ Driver
"Native Instruments Audio 8 DJ Driver" = Native Instruments Audio 8 DJ Driver
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Traktor" = Native Instruments Traktor
"Native Instruments Traktor DJ Studio 3" = Native Instruments Traktor DJ Studio 3
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"orbit_is1" = Orbit Downloader
"ProInst" = Intel® PROSet/Wireless Software
"Radeon Omega Drivers for Windows 2k/XPv3.8.291" = Radeon Omega Drivers v3.8.291 Setup Files and Tools
"Radeon Omega Drivers for Windows 2k/XPv3.8.330" = Radeon Omega Drivers v3.8.330 Setup Files and Tools
"Radeon Omega Drivers for Windows 2k/XPv3.8.360" = Radeon Omega Drivers v3.8.360 Setup Files and Tools
"Radeon Omega Drivers for Windows XP/2kv4.8.442" = Radeon Omega Drivers v4.8.442 Setup Files and Tools
"RestoreIT!" = Recover Pro
"Skype_is1" = Skype 2.5
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"uninstall_is1" = Uninstall 1.0.0.1
"vlc media player" = VLC media player 1.0.3
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Winamp" = Winamp (remove only)
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR Archivierer
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xvid_is1" = Xvid 1.1.2 final uninstall

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"727d1ea1876aa06e" = WowAceUpdater

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 18.02.2010 15:19:42 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x0018f7c4.

Error - 23.02.2010 04:33:10 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00450043.

Error - 28.02.2010 16:05:49 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00330070.

Error - 03.03.2010 17:08:48 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x006d002e.

Error - 04.03.2010 15:51:22 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x0018bf98.

Error - 11.03.2010 20:14:53 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung egui.exe, Version 4.0.474.0, fehlgeschlagenes
Modul eguiupdate.dll, Version 4.0.474.0, Fehleradresse 0x00008692.

Error - 15.03.2010 16:48:16 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00185e39.

Error - 18.03.2010 13:14:50 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung wmplayer.exe, Version 11.0.5721.5145, fehlgeschlagenes
Modul ffdshow.ax, Version 1.0.5.2471, Fehleradresse 0x00201d3b.

Error - 18.03.2010 18:20:00 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x0018aa38.

Error - 22.03.2010 14:26:13 | Computer Name = LDEECKE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.3156, fehlgeschlagenes
Modul , Version 0.0.0.0, Fehleradresse 0x00000000.

[ System Events ]
Error - 18.04.2010 06:26:26 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7034
Description = Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.

Error - 18.04.2010 06:28:26 | Computer Name = LDEECKE | Source = NETLOGON | ID = 3095
Description = Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert,
nicht als Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser Konfiguration
nicht gestartet zu sein.

Error - 18.04.2010 06:28:30 | Computer Name = LDEECKE | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 18.04.2010 06:28:36 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Automatische Updates" wurde aufgrund folgenden Fehlers
nicht gestartet: %%2

Error - 18.04.2010 06:33:36 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: %%1460

Error - 18.04.2010 09:21:46 | Computer Name = LDEECKE | Source = NETLOGON | ID = 3095
Description = Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert,
nicht als Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser Konfiguration
nicht gestartet zu sein.

Error - 18.04.2010 09:21:55 | Computer Name = LDEECKE | Source = ati2mtag | ID = 45062
Description = CRT invalid display type

Error - 18.04.2010 09:22:02 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Automatische Updates" wurde aufgrund folgenden Fehlers
nicht gestartet: %%2

Error - 18.04.2010 09:22:07 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
IntelIde

Error - 18.04.2010 09:26:52 | Computer Name = LDEECKE | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: %%1460


< End of report >

Edited by ldeecke, 18 April 2010 - 11:34 AM.

  • 0

#4
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
Make sure your external drives are connected during the following scan.

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**
  • If you are using Firefox, make sure that your download settings are as follows:
    • Tools->Options->Main tab
    • Set to "Always ask me where to Save the files".
  • During the download, rename Combofix to Combo-Fix as follows:

    Posted Image

    Posted Image

  • It is important you rename Combofix during the download, but not after.
  • Please do not rename Combofix to other names, but only to the one indicated.
  • Close any open browsers.
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    -----------------------------------------------------------

    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

      -----------------------------------------------------------

    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

    -----------------------------------------------------------

  • Double click on combo-Fix.exe & follow the prompts.
  • Install the Recovery Console if prompted.
  • When finished, it will produce a report for you.
  • Please post the "C:\Combo-Fix.txt" .
**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**


Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version.
  • 0

#5
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello,

thank you very much in helping me tackle this problem.

Here goes the Combofix Log.

--------------------------------------------

ComboFix 10-04-17.07 - Lucas Deecke 19.04.2010 11:30:28.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.49.1031.18.1022.718 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Lucas Deecke\Desktop\Combo-Fix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\dokumente und einstellungen\Default User\Cookies.lnk
c:\dokumente und einstellungen\LocalService\Cookies.lnk
c:\dokumente und einstellungen\Lucas Deecke\Cookies.lnk
c:\dokumente und einstellungen\NetworkService\Cookies.lnk
c:\recycler\S-1-5-21-299502267-1644491937-839522115-1003
c:\windows\system32\srcr.dat

.
((((((((((((((((((((((( Dateien erstellt von 2010-03-19 bis 2010-04-19 ))))))))))))))))))))))))))))))
.

2010-04-18 10:31 . 2010-04-18 10:31 -------- d-----w- c:\programme\ERUNT
2010-04-13 15:43 . 2010-04-13 16:44 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
2010-04-13 15:43 . 2010-04-13 15:58 670696 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
2010-04-13 15:43 . 2010-04-13 15:58 833960 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
2010-04-13 15:35 . 2010-04-13 15:35 -------- d-----w- C:\_OTL
2010-04-13 12:43 . 2010-04-13 12:43 5918776 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-04-12 17:31 . 2010-04-12 17:31 -------- d---a-w- C:\INFECTED
2010-04-01 10:10 . 2010-04-01 10:10 -------- d-----r- c:\dokumente und einstellungen\LocalService\Eigene Dateien
2010-03-30 14:16 . 2010-03-30 14:16 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Opera
2010-03-30 14:08 . 2010-04-13 16:45 -------- d-----w- c:\programme\Opera
2010-03-30 13:41 . 2010-03-30 13:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Avira
2010-03-30 13:38 . 2010-03-01 09:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-30 13:38 . 2010-02-16 13:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-30 13:38 . 2009-05-11 11:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-03-30 13:38 . 2009-05-11 11:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-03-30 13:38 . 2010-04-01 09:00 -------- d-----w- c:\programme\Avira
2010-03-30 13:38 . 2010-03-30 13:38 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-19 09:17 . 2006-10-25 17:18 -------- d-----w- c:\programme\Mozilla Thunderbird
2010-04-19 00:49 . 2007-04-09 14:37 -------- d-----w- c:\programme\mIRC
2010-04-17 16:12 . 2010-03-03 14:28 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Orbit
2010-04-14 20:28 . 2009-11-30 12:12 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\vlc
2010-04-14 18:42 . 2006-12-06 15:45 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\uTorrent
2010-04-14 06:01 . 2005-08-30 17:19 84978 ----a-w- c:\windows\system32\perfc007.dat
2010-04-14 06:01 . 2005-08-30 17:19 439676 ----a-w- c:\windows\system32\perfh007.dat
2010-04-13 12:49 . 2010-01-03 18:19 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2010-04-01 10:10 . 2009-09-01 18:14 -------- d-----w- c:\programme\dBpoweramp
2010-04-01 10:10 . 2007-03-31 12:42 -------- d-----w- c:\programme\Microsoft SQL Server
2010-04-01 10:10 . 2007-01-08 13:31 -------- d-----w- c:\programme\Google
2010-04-01 10:10 . 2006-11-01 21:58 -------- d-----w- c:\programme\Logitech
2010-04-01 10:10 . 2005-08-30 13:17 -------- d-----w- c:\programme\ATI Technologies
2010-04-01 10:10 . 2005-08-30 08:49 -------- d-----w- c:\programme\CyberLink
2010-04-01 10:10 . 2008-03-04 20:36 -------- d-----w- c:\programme\Yahoo!
2010-04-01 09:48 . 2009-02-09 05:45 1 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-01 09:25 . 2006-12-04 15:40 -------- d-----w- c:\programme\Teamspeak2
2010-04-01 09:10 . 2008-05-12 20:48 -------- d-----w- c:\programme\Tortun
2010-04-01 09:10 . 2010-01-11 13:59 -------- d-----w- c:\programme\TeaTimer (Spybot - Search & Destroy)
2010-04-01 09:03 . 2007-06-09 14:41 -------- d-----w- c:\programme\Windows Live
2010-04-01 09:03 . 2006-11-03 22:16 -------- d-----w- c:\programme\Winamp
2010-04-01 09:03 . 2009-02-19 14:59 -------- d-----w- c:\programme\Western Digital
2010-04-01 09:03 . 2008-06-28 14:44 -------- d-----w- c:\programme\WaveLab
2010-04-01 09:03 . 2009-11-30 12:10 -------- d-----w- c:\programme\VideoLAN
2010-04-01 09:03 . 2008-08-06 20:55 -------- d-----w- c:\programme\Syncrosoft
2010-04-01 09:03 . 2005-08-30 08:42 -------- d-----w- c:\programme\SRS Labs
2010-04-01 09:01 . 2009-09-29 13:47 -------- d-----w- c:\programme\iTunes
2010-04-01 09:00 . 2008-06-26 14:43 -------- d-----w- c:\programme\Cubase LE
2010-04-01 08:56 . 2010-04-01 08:34 509 ----a-w- c:\windows\Fonts\New Harry Potter and....lnk
2010-04-01 08:53 . 2008-04-06 14:19 -------- d--h--w- c:\programme\Zero G Registry
2010-04-01 08:53 . 2009-07-20 18:38 -------- d-----w- c:\programme\Youtube Converter
2010-04-01 08:53 . 2007-03-11 20:02 -------- d-----w- c:\programme\Xvid
2010-04-01 08:53 . 2007-03-11 19:22 -------- d-----w- c:\programme\Windows Media Connect 2
2010-03-31 18:36 . 2010-04-01 08:39 1433 ----a-w- c:\programme\Gemeinsame Dateien\My name is Yuyun.rtf
2010-03-31 18:36 . 2010-04-01 08:39 1433 ----a-w- c:\programme\Gemeinsame Dateien\Baca AQ.rtf
2010-03-31 18:36 . 2010-04-01 08:39 1433 ----a-w- c:\programme\My name is Yuyun.rtf
2010-03-31 18:36 . 2010-04-01 08:39 1433 ----a-w- c:\programme\Baca AQ.rtf
2010-03-31 18:36 . 2010-04-01 08:34 1433 ----a-w- c:\windows\Fonts\My name is Yuyun.rtf
2010-03-31 18:36 . 2010-04-01 08:34 1433 ----a-w- c:\windows\Fonts\Baca AQ.rtf
2010-03-30 00:46 . 2010-01-03 18:19 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-30 00:45 . 2010-01-03 18:19 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-28 20:25 . 2009-12-26 17:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\dvdcss
2010-03-26 14:39 . 2007-04-20 22:27 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2010-03-03 16:36 . 2010-03-03 16:36 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\GrabPro
2009-12-23 10:44 . 2009-12-23 10:44 0 ----a-w- c:\programme\Malware
2004-08-04 14:00 . 2006-11-10 23:41 413696 ----a-w- c:\programme\mozilla firefox\plugins\msvcp60.dll
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\programme\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-07-27 1388544]
"RestoreIT!"="c:\programme\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" [2004-09-23 114688]
"MagicKeyboard"="c:\programme\SAMSUNG\MagicKBD\PreMKBD.exe" [2005-04-11 151552]
"RemoteControl"="c:\programme\CyberLink\PowerDVD\PDVDServ.exe" [2004-03-16 32768]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-12-10 49152]
"BatteryManager"="c:\programme\Samsung\Samsung Battery Manager\BatteryManager.exe" [2005-08-18 1933312]
"AtiPTA"="atiptaxx.exe" [2006-02-22 344064]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\dokumente und einstellungen\Lucas Deecke\Startmen\Programme\Autostart\
Adobe Gamma.lnk - c:\programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Logitech SetPoint.lnk - c:\programme\Logitech\SetPoint\SetPoint.exe [2006-11-1 434176]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\FlashFXP\\FlashFXP.exe"=
"c:\\Dokumente und Einstellungen\\Lucas Deecke\\Desktop\\utorrent.exe"=
"c:\\Programme\\mIRC\\mirc.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Mozilla Firefox\\firefox.exe"=
"c:\\Programme\\devolo\\informer\\devinf.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Orbitdownloader\\orbitdm.exe"=
"c:\\Programme\\Orbitdownloader\\orbitnet.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R0 RITCPT;RITCPT;c:\windows\system32\drivers\RITCPT.SYS [30.08.2005 10:44 43512]
R2 antivirschedulerservice;Avira AntiVir Scheduler;c:\programme\Avira\AntiVir Desktop\sched.exe [30.03.2010 15:38 135336]
R2 DOSMEMIO;MEMIO;c:\windows\system32\MEMIO.SYS [30.08.2005 10:43 4300]
R2 FBAPI;FBAPI;c:\windows\system32\drivers\FBAPI.sys [30.08.2005 10:44 5088]
R2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\system32\drivers\npf_devolo.sys [28.11.2008 15:34 35840]
R3 wowfilter;WOW XT Filter Driver;c:\windows\system32\drivers\WOWFilter.sys [08.06.2005 16:58 17792]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [20.04.2007 09:31 717296]
S1 a047ea59;a047ea59;c:\windows\system32\drivers\a047ea59.sys --> c:\windows\system32\drivers\a047ea59.sys [?]
S2 SNM WLAN Service;SNM WLAN Service;c:\programme\Samsung\Samsung Network Manager\SNMWLANService.exe [28.05.2005 08:35 36864]
S3 a4djavs;a4djavs;c:\windows\system32\drivers\a4djavs.sys [08.07.2009 11:57 35216]
S3 a4djusb;a4djusb;c:\windows\system32\drivers\a4djusb.sys [08.07.2009 11:57 226576]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [18.03.2009 23:12 16512]
S3 MAYA44;usb-audio.de driver for Maya44;c:\windows\system32\drivers\Maya44.sys [26.06.2008 17:26 325344]
S3 pgusbmme;usb-audio.de MME-Adapter;c:\windows\system32\drivers\pgusbmm3.sys [26.06.2008 17:26 23360]
S3 PLCMPR5;PLCMPR5 NDIS Protocol Driver;\??\c:\windows\system32\PLCMPR5.SYS --> c:\windows\system32\PLCMPR5.SYS [?]
.
Inhalt des "geplante Tasks" Ordners

2010-03-15 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: &download by arles download manager - c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Ariel Download Manager\ADM.htm
IE: &download by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/201
IE: &grab video by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/204
IE: do&wnload selected by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/203
IE: down&load all by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/202
FF - ProfilePath - c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\
FF - component: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
FF - component: c:\programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabXpcom.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071303000004.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\np32dsw.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npnul32.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin2.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin3.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin4.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin5.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin6.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npqtplugin7.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npUMediaPlayer.dll
FF - plugin: c:\progra~1\Mozilla Firefox\plugins\npyaxmpb.dll
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npUMediaPlayer.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npyaxmpb.dll

---- FIREFOX Richtlinien ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\programme\Mozilla Firefox\defaults\pref\activex.js - pref("capability.policy.default.ClassID.CIDFE0BD779-44EE-4A4B-AA2E-743C63F2E5E6", "AllAccess");
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

BHO-{B42824CE-A805-3B37-BF74-C19B93CF24C7} - (no file)
Notify-WgaLogon - (no file)
AddRemove-XPv3.8.291 - c:\windows\Radeon Omega Drivers v3.8.291
AddRemove-XPv3.8.330 - c:\windows\Radeon Omega Drivers v3.8.330
AddRemove-XPv3.8.360 - c:\windows\Radeon Omega Drivers v3.8.360
AddRemove-2kv4.8.442 - c:\windows\Radeon Omega Drivers v4.8.442



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-19 11:35
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(796)
c:\windows\system32\Ati2evxx.dll
.
Zeit der Fertigstellung: 2010-04-19 11:37:51
ComboFix-quarantined-files.txt 2010-04-19 09:37

Vor Suchlauf: 1.737.916.416 Bytes frei
Nach Suchlauf: 1.702.137.856 Bytes frei

WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - 25E808B2DA4180C25738A06FE7285FD6

  • 0

#6
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
Hi, ldeecke :)

  • Copy the entire contents of the Quote Box below to Notepad.
  • Name the file as CFScript.txt
  • Change the Save as Type to All Files
  • and Save it on the desktop

File::
C:\Programme\Gemeinsame Dateien\My name is Yuyun.rtf
C:\Programme\Gemeinsame Dateien\Baca AQ.rtf
C:\Programme\My name is Yuyun.rtf
C:\Programme\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Baca AQ.rtf
C:\Dokumente und Einstellungen\All Users\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\All Users\Baca AQ.rtf
C:\WINDOWS\Tasks\Baca AQ.rtf
C:\WINDOWS\Tasks\My name is Yuyun.rtf

Driver::
a047ea59
PLCMPR5


Posted Image

Once saved, referring to the picture above, drag CFScript.txt into ComboFix.exe, and post back the resulting report.

I don't see an Autorun problem in your drives.

Edited by JSntgRvr, 19 April 2010 - 09:22 AM.

  • 0

#7
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello.

When I start the Combofix scan, it informs me that emulated drives are running, and restarts the PC. However, to my knowledge, I am not running Daemon Tools or similar. Is this supposed to happen?

-- I can now access the folders on my external drive (F:\), however, there are still numerous files within the folders. I assume these are deployed by Yuyun_Cantix (since they are named "My Name is Yuyun.rtf", "Baca AQ.rtf",..).

If I try to access the drive through Run in the Windows Start menu, though, a window pops up forcing me to choose a program to open a file. I.e. XXX.ink.

There seems to be a pattern, for instance:
If I try to open (through Run) F:\Folder1\Folder2\Folder3, the file I am supposed to open is called Folder3.Ink.

I hope you can follow. I am eager to answer any questions that you have.

And now: The Combofix log:

---------------------------------

ComboFix 10-04-17.07 - Lucas Deecke 19.04.2010 18:04:40.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.49.1031.18.1022.695 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Lucas Deecke\Desktop\Combo-Fix.exe
Benutzte Befehlsschalter :: c:\dokumente und einstellungen\Lucas Deecke\Desktop\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\dokumente und einstellungen\All Users\Baca AQ.rtf"
"c:\dokumente und einstellungen\All Users\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\My name is Yuyun.rtf"
"c:\programme\Baca AQ.rtf"
"c:\programme\Gemeinsame Dateien\Baca AQ.rtf"
"c:\programme\Gemeinsame Dateien\My name is Yuyun.rtf"
"c:\programme\My name is Yuyun.rtf"
"c:\windows\Tasks\Baca AQ.rtf"
"c:\windows\Tasks\My name is Yuyun.rtf"
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\dokumente und einstellungen\All Users\Baca AQ.rtf
c:\dokumente und einstellungen\All Users\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\My name is Yuyun.rtf
c:\programme\Baca AQ.rtf
c:\programme\Gemeinsame Dateien\Baca AQ.rtf
c:\programme\Gemeinsame Dateien\My name is Yuyun.rtf
c:\programme\My name is Yuyun.rtf
c:\windows\Tasks\Baca AQ.rtf
c:\windows\Tasks\My name is Yuyun.rtf

.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_a047ea59
-------\Service_PLCMPR5


((((((((((((((((((((((( Dateien erstellt von 2010-03-19 bis 2010-04-19 ))))))))))))))))))))))))))))))
.

2010-04-19 09:20 . 2010-04-19 09:38 -------- d-----w- C:\Combo-Fix
2010-04-18 10:31 . 2010-04-18 10:31 -------- d-----w- c:\programme\ERUNT
2010-04-13 15:43 . 2010-04-13 16:44 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
2010-04-13 15:35 . 2010-04-13 15:35 -------- d-----w- C:\_OTL
2010-04-12 17:31 . 2010-04-12 17:31 -------- d---a-w- C:\INFECTED
2010-04-01 10:10 . 2010-04-01 10:10 -------- d-----r- c:\dokumente und einstellungen\LocalService\Eigene Dateien
2010-03-30 14:16 . 2010-03-30 14:16 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Opera
2010-03-30 14:08 . 2010-04-13 16:45 -------- d-----w- c:\programme\Opera
2010-03-30 13:41 . 2010-03-30 13:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Avira
2010-03-30 13:38 . 2010-03-01 09:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-30 13:38 . 2010-02-16 13:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-30 13:38 . 2009-05-11 11:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-03-30 13:38 . 2009-05-11 11:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-03-30 13:38 . 2010-04-01 09:00 -------- d-----w- c:\programme\Avira
2010-03-30 13:38 . 2010-03-30 13:38 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-19 14:23 . 2009-02-09 05:45 1 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-19 13:57 . 2006-10-25 17:18 -------- d-----w- c:\programme\Mozilla Thunderbird
2010-04-19 11:58 . 2005-08-30 17:19 84978 ----a-w- c:\windows\system32\perfc007.dat
2010-04-19 11:58 . 2005-08-30 17:19 439676 ----a-w- c:\windows\system32\perfh007.dat
2010-04-19 11:44 . 2007-04-09 14:37 -------- d-----w- c:\programme\mIRC
2010-04-17 16:12 . 2010-03-03 14:28 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Orbit
2010-04-14 20:28 . 2009-11-30 12:12 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\vlc
2010-04-14 18:42 . 2006-12-06 15:45 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\uTorrent
2010-04-13 15:58 . 2010-04-13 15:43 670696 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
2010-04-13 15:58 . 2010-04-13 15:43 833960 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
2010-04-13 12:49 . 2010-01-03 18:19 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2010-04-13 12:43 . 2010-04-13 12:43 5918776 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-04-01 10:10 . 2009-09-01 18:14 -------- d-----w- c:\programme\dBpoweramp
2010-04-01 10:10 . 2007-03-31 12:42 -------- d-----w- c:\programme\Microsoft SQL Server
2010-04-01 10:10 . 2007-01-08 13:31 -------- d-----w- c:\programme\Google
2010-04-01 10:10 . 2006-11-01 21:58 -------- d-----w- c:\programme\Logitech
2010-04-01 10:10 . 2005-08-30 13:17 -------- d-----w- c:\programme\ATI Technologies
2010-04-01 10:10 . 2005-08-30 08:49 -------- d-----w- c:\programme\CyberLink
2010-04-01 10:10 . 2008-03-04 20:36 -------- d-----w- c:\programme\Yahoo!
2010-04-01 09:25 . 2006-12-04 15:40 -------- d-----w- c:\programme\Teamspeak2
2010-04-01 09:10 . 2008-05-12 20:48 -------- d-----w- c:\programme\Tortun
2010-04-01 09:10 . 2010-01-11 13:59 -------- d-----w- c:\programme\TeaTimer (Spybot - Search & Destroy)
2010-04-01 09:03 . 2007-06-09 14:41 -------- d-----w- c:\programme\Windows Live
2010-04-01 09:03 . 2006-11-03 22:16 -------- d-----w- c:\programme\Winamp
2010-04-01 09:03 . 2009-02-19 14:59 -------- d-----w- c:\programme\Western Digital
2010-04-01 09:03 . 2008-06-28 14:44 -------- d-----w- c:\programme\WaveLab
2010-04-01 09:03 . 2009-11-30 12:10 -------- d-----w- c:\programme\VideoLAN
2010-04-01 09:03 . 2008-08-06 20:55 -------- d-----w- c:\programme\Syncrosoft
2010-04-01 09:03 . 2005-08-30 08:42 -------- d-----w- c:\programme\SRS Labs
2010-04-01 09:01 . 2009-09-29 13:47 -------- d-----w- c:\programme\iTunes
2010-04-01 09:00 . 2008-06-26 14:43 -------- d-----w- c:\programme\Cubase LE
2010-04-01 08:56 . 2010-04-01 08:34 509 ----a-w- c:\windows\Fonts\New Harry Potter and....lnk
2010-04-01 08:53 . 2008-04-06 14:19 -------- d--h--w- c:\programme\Zero G Registry
2010-04-01 08:53 . 2009-07-20 18:38 -------- d-----w- c:\programme\Youtube Converter
2010-04-01 08:53 . 2007-03-11 20:02 -------- d-----w- c:\programme\Xvid
2010-04-01 08:53 . 2007-03-11 19:22 -------- d-----w- c:\programme\Windows Media Connect 2
2010-03-31 18:36 . 2010-04-01 08:34 1433 ----a-w- c:\windows\Fonts\My name is Yuyun.rtf
2010-03-31 18:36 . 2010-04-01 08:34 1433 ----a-w- c:\windows\Fonts\Baca AQ.rtf
2010-03-30 00:46 . 2010-01-03 18:19 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-30 00:45 . 2010-01-03 18:19 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-28 20:25 . 2009-12-26 17:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\dvdcss
2010-03-26 14:39 . 2007-04-20 22:27 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2010-03-03 16:36 . 2010-03-03 16:36 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\GrabPro
2009-12-23 10:44 . 2009-12-23 10:44 0 ----a-w- c:\programme\Malware
2004-08-04 14:00 . 2006-11-10 23:41 413696 ----a-w- c:\programme\mozilla firefox\plugins\msvcp60.dll
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\programme\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-07-27 1388544]
"RestoreIT!"="c:\programme\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" [2004-09-23 114688]
"MagicKeyboard"="c:\programme\SAMSUNG\MagicKBD\PreMKBD.exe" [2005-04-11 151552]
"RemoteControl"="c:\programme\CyberLink\PowerDVD\PDVDServ.exe" [2004-03-16 32768]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-12-10 49152]
"BatteryManager"="c:\programme\Samsung\Samsung Battery Manager\BatteryManager.exe" [2005-08-18 1933312]
"AtiPTA"="atiptaxx.exe" [2006-02-22 344064]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\dokumente und einstellungen\Lucas Deecke\Startmen\Programme\Autostart\
Adobe Gamma.lnk - c:\programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Logitech SetPoint.lnk - c:\programme\Logitech\SetPoint\SetPoint.exe [2006-11-1 434176]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[BU]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\FlashFXP\\FlashFXP.exe"=
"c:\\Dokumente und Einstellungen\\Lucas Deecke\\Desktop\\utorrent.exe"=
"c:\\Programme\\mIRC\\mirc.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Mozilla Firefox\\firefox.exe"=
"c:\\Programme\\devolo\\informer\\devinf.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Orbitdownloader\\orbitdm.exe"=
"c:\\Programme\\Orbitdownloader\\orbitnet.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R0 RITCPT;RITCPT;c:\windows\system32\drivers\RITCPT.SYS [30.08.2005 10:44 43512]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [20.04.2007 09:31 717296]
R2 antivirschedulerservice;Avira AntiVir Scheduler;c:\programme\Avira\AntiVir Desktop\sched.exe [30.03.2010 15:38 135336]
R2 DOSMEMIO;MEMIO;c:\windows\system32\MEMIO.SYS [30.08.2005 10:43 4300]
R2 FBAPI;FBAPI;c:\windows\system32\drivers\FBAPI.sys [30.08.2005 10:44 5088]
R2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\system32\drivers\npf_devolo.sys [28.11.2008 15:34 35840]
R2 SNM WLAN Service;SNM WLAN Service;c:\programme\Samsung\Samsung Network Manager\SNMWLANService.exe [28.05.2005 08:35 36864]
R3 wowfilter;WOW XT Filter Driver;c:\windows\system32\drivers\WOWFilter.sys [08.06.2005 16:58 17792]
S3 a4djavs;a4djavs;c:\windows\system32\drivers\a4djavs.sys [08.07.2009 11:57 35216]
S3 a4djusb;a4djusb;c:\windows\system32\drivers\a4djusb.sys [08.07.2009 11:57 226576]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [18.03.2009 23:12 16512]
S3 MAYA44;usb-audio.de driver for Maya44;c:\windows\system32\drivers\Maya44.sys [26.06.2008 17:26 325344]
S3 pgusbmme;usb-audio.de MME-Adapter;c:\windows\system32\drivers\pgusbmm3.sys [26.06.2008 17:26 23360]
.
Inhalt des "geplante Tasks" Ordners

2010-04-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: &download by arles download manager - c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Ariel Download Manager\ADM.htm
IE: &download by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/201
IE: &grab video by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/204
IE: do&wnload selected by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/203
IE: down&load all by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/202
FF - ProfilePath - c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\
FF - component: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
FF - component: c:\programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabXpcom.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071303000004.dll
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npUMediaPlayer.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npyaxmpb.dll

---- FIREFOX Richtlinien ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\programme\Mozilla Firefox\defaults\pref\activex.js - pref("capability.policy.default.ClassID.CIDFE0BD779-44EE-4A4B-AA2E-743C63F2E5E6", "AllAccess");
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

BHO-{B42824CE-A805-3B37-BF74-C19B93CF24C7} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-19 18:15
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x86FD81F8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf76f4fc3
\Driver\ACPI -> ACPI.sys @ 0xf752ecb8
\Driver\atapi -> 0x86fd81f8
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0094
ParseProcedure -> ntoskrnl.exe @ 0x8056f08e
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0094
ParseProcedure -> ntoskrnl.exe @ 0x8056f08e
NDIS: Broadcom 440x 10/100 Integrated Controller -> SendCompleteHandler -> NDIS.sys @ 0xf73c1ba0
PacketIndicateHandler -> NDIS.sys @ 0xf73b0a0b
SendHandler -> NDIS.sys @ 0xf73c4b31
Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(1036)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2816)
c:\programme\Logitech\SetPoint\GameHook.dll
c:\programme\Logitech\SetPoint\lgscroll.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\programme\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\HPZipm12.exe
c:\programme\Analog Devices\SoundMAX\SMAgent.exe
c:\programme\SAMSUNG\MagicKBD\MagicKBD.exe
c:\programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE
c:\programme\iPod\bin\iPodService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2010-04-19 18:22:26 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2010-04-19 16:22
ComboFix2.txt 2010-04-19 09:37

Vor Suchlauf: 1.694.044.160 Bytes frei
Nach Suchlauf: 1.578.061.824 Bytes frei

- - End Of File - - 72FD4AB9B7D640F58CFC2FB0EA61A80F

Edited by ldeecke, 19 April 2010 - 10:37 AM.

  • 0

#8
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
What program you expect to open these .lnk folders/files. In they were saved as.lnk files, this file association is already taken by your shortcuts.

Lets identify those .rtf files:
  • Launch OTL.exe. Make sure all other windows are closed and to let it run uninterrupted.
  • OTL should now start.
    • Leave settings as they appear as default.
  • Under the Custom Scan box paste this in


    C:\*.rtf /s
    F:\*.rtf /s
    F:\*.lnk /s
    F:\*.ink /s

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt (first run only). These are saved in the same location as OTL.
    • Please post the contents of these files in your next reply.

  • 0

#9
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello.

Only OTL.txt was created.

Thanks for your help so far!

--------------------------------------

OTL logfile created on: 19.04.2010 20:31:15 - Run 2
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Dokumente und Einstellungen\Lucas Deecke\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1.022,00 Mb Total Physical Memory | 530,00 Mb Available Physical Memory | 52,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 67,28 Gb Total Space | 1,46 Gb Free Space | 2,17% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 232,83 Gb Total Space | 141,60 Gb Free Space | 60,82% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LDEECKE
Current User Name: Lucas Deecke
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.04.19 11:59:22 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.04.14 10:23:40 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
PRC - [2010.03.02 12:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.02.24 11:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2010.01.14 23:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009.05.29 13:41:26 | 000,144,712 | ---- | M] (Apple Inc.) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2007.08.09 09:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2007.06.13 15:21:45 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005.08.18 10:33:26 | 001,933,312 | ---- | M] () -- C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe
PRC - [2005.06.27 19:30:06 | 000,360,448 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Programme\Samsung\MagicKBD\MagicKBD.exe
PRC - [2005.05.28 08:35:56 | 000,036,864 | R--- | M] () -- C:\Programme\Samsung\Samsung Network Manager\SNMWLANService.exe
PRC - [2005.01.28 16:35:58 | 000,434,176 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\SetPoint\SetPoint.exe
PRC - [2004.12.10 14:45:26 | 000,049,152 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE
PRC - [2004.07.27 13:48:04 | 001,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
PRC - [2002.09.20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe


========== Modules (SafeList) ==========

MOD - [2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
MOD - [2006.08.25 17:46:44 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2005.01.28 16:34:04 | 000,057,344 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\SetPoint\lgscroll.dll
MOD - [2005.01.28 16:31:34 | 000,045,056 | ---- | M] () -- C:\Programme\Logitech\SetPoint\gamehook.dll
MOD - [2003.03.18 22:14:52 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcp71.dll
MOD - [2003.02.21 06:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll


========== Win32 Services (SafeList) ==========

SRV - [2010.04.19 11:59:22 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (antivirservice)
SRV - [2010.02.24 11:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (antivirschedulerservice)
SRV - [2009.05.29 13:41:26 | 000,144,712 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2007.10.25 16:27:54 | 000,266,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc)
SRV - [2007.08.09 09:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2006.10.29 15:53:32 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2005.05.28 08:35:56 | 000,036,864 | R--- | M] () [Auto | Running] -- C:\Programme\samsung\Samsung Network Manager\SNMWLANService.exe -- (SNM WLAN Service)
SRV - [2005.04.04 02:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2002.12.17 17:26:22 | 007,520,337 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)
SRV - [2002.12.17 17:23:30 | 000,311,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)
SRV - [2002.09.20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Running] -- -- (catchme)
DRV - [2010.03.01 11:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.02.16 15:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.05.11 13:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.05.11 11:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.03.26 16:44:12 | 000,035,216 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a4djavs.sys -- (a4djavs)
DRV - [2009.03.26 16:44:09 | 000,226,576 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a4djusb.sys -- (a4djusb)
DRV - [2008.11.28 15:34:56 | 000,035,840 | ---- | M] (CACE Technologies) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf_devolo.sys -- (NPF_devolo) NetGroup Packet Filter Driver (devolo)
DRV - [2008.06.20 11:52:06 | 000,225,920 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008.04.06 15:21:34 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2007.12.05 07:26:40 | 002,782,208 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007.06.18 16:18:26 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\motmodem.sys -- (motmodem)
DRV - [2007.02.08 14:51:16 | 002,209,408 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel®
DRV - [2006.11.20 20:15:35 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2006.11.20 20:15:35 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2006.05.17 11:03:24 | 000,044,544 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2005.07.13 11:58:18 | 000,463,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2005.06.08 16:58:10 | 000,017,792 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WOWFilter.sys -- (wowfilter)
DRV - [2005.04.18 22:21:08 | 000,027,136 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\risdptsk.sys -- (risdptsk)
DRV - [2005.03.04 05:02:20 | 001,066,278 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005.02.02 04:58:58 | 000,191,456 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2004.12.10 14:48:46 | 000,024,704 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidKE.Sys -- (LHidKe)
DRV - [2004.12.10 14:48:40 | 000,068,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2004.12.10 14:48:18 | 000,036,480 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidUsbK.sys -- (LHidUsbK)
DRV - [2004.12.10 14:47:58 | 000,013,056 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2004.12.06 15:51:10 | 000,051,328 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\rimsptsk.sys -- (rimsptsk)
DRV - [2004.12.05 21:57:14 | 000,307,456 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\rixdptsk.sys -- (rismxdp)
DRV - [2004.11.23 22:29:40 | 000,325,344 | ---- | M] (Audiotrack) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Maya44.sys -- (MAYA44)
DRV - [2004.11.23 22:27:16 | 000,023,360 | ---- | M] (usb-audio.de) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pgusbmm3.sys -- (pgusbmme)
DRV - [2004.08.04 14:00:00 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2004.08.04 01:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB-Audiotreiber (WDM)
DRV - [2004.05.18 07:43:58 | 000,043,512 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\RITCPT.SYS -- (RITCPT)
DRV - [2004.05.18 07:43:54 | 000,005,088 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\FBAPI.sys -- (FBAPI)
DRV - [2002.07.17 10:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ASPI32.SYS -- (ASPI)
DRV - [2000.08.23 18:19:38 | 000,004,300 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.11
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.18
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.1
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.4
FF - prefs.js..extensions.enabledItems: {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.1
FF - prefs.js..network.proxy.ftp: "200.78.117.242"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "200.78.117.242"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "200.78.117.242"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.socks: "200.78.117.242"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "200.78.117.242"
FF - prefs.js..network.proxy.ssl_port: 3128


FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.04.14 10:23:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.04.14 10:23:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\mozilla thunderbird 3.0.1\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.01.29 20:33:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\mozilla thunderbird 3.0.1\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2009.11.29 17:01:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\thunderbird\extensions\\eplgTb@eset.com: C:\Programme\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2010.01.29 20:34:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Extensions
[2010.01.29 20:34:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.04.19 15:37:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions
[2010.01.28 15:56:59 | 000,000,000 | ---D | M] (All-in-One Sidebar) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d}
[2010.04.14 19:31:01 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2009.11.30 14:46:14 | 000,000,000 | ---D | M] (PDF Download) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}
[2010.04.13 17:43:39 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010.04.14 19:30:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2009.03.30 19:38:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\moveplayer@movenetworks.com
[2007.07.25 15:22:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Sunbird\Profiles\a161j38o.default\extensions
[2008.08.20 13:07:23 | 000,001,660 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\leo-deu-eng.xml
[2008.08.19 18:16:10 | 000,001,141 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\wikipedia-de.xml
[2008.09.10 00:00:59 | 000,001,334 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\searchplugins\wiktionary-de.xml
[2010.04.19 15:37:26 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2007.05.08 22:42:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
[2004.08.04 16:00:00 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Programme\Mozilla Firefox\plugins\msvcp60.dll
[2006.10.26 23:13:26 | 000,049,152 | ---- | M] (BitTorrent, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npbittorrent.dll
[2005.12.22 20:14:00 | 000,245,830 | ---- | M] (C Systems - Creative Software Solutions since 1996) -- C:\Programme\Mozilla Firefox\plugins\npUMediaPlayer.dll
[2007.03.10 01:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Programme\Mozilla Firefox\plugins\npyaxmpb.dll
[2010.04.14 10:23:50 | 000,001,538 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010.04.14 10:23:50 | 000,000,947 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010.04.14 10:23:50 | 000,000,769 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010.04.14 10:23:51 | 000,000,831 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2010.04.19 18:15:20 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Octh Class) - {000123b4-9b42-4900-b3f7-f4b073efc214} - C:\Programme\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [AtiPTA] C:\WINDOWS\System32\atiptaxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BatteryManager] C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe ()
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech Inc.)
O4 - HKLM..\Run: [MagicKeyboard] C:\Programme\Samsung\MagicKBD\PreMKbd.exe ()
O4 - HKLM..\Run: [RestoreIT!] C:\Programme\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE (FarStone Tech. Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\Lucas Deecke\Startmenü\Programme\Autostart\Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &download by arles download manager - C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Ariel Download Manager\ADM.htm ()
O8 - Extra context menu item: &download by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &grab video by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: do&wnload selected by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: down&load all by orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\npjpi160_02.dll (Sun Microsystems, Inc.)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\Partypoker\PartyPoker\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\Partypoker\PartyPoker\RunApp.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.micr...heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.ma...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} http://pdl.stream.ao.../ampx_en_dl.cab (IWinAmpActiveX Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\atiextevent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.08.30 10:33:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008.05.30 09:31:56 | 000,000,054 | -H-- | M] () - F:\autorun.in_2.org -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.04.19 20:30:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\yuyun
[2010.04.19 19:02:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010.04.19 18:38:30 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.04.19 18:22:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.04.19 11:25:50 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.04.19 11:24:54 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.04.19 11:24:54 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.04.19 11:24:54 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.04.19 11:24:54 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.04.19 11:20:50 | 000,000,000 | ---D | C] -- C:\Combo-Fix
[2010.04.19 11:20:36 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.04.18 12:31:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.04.18 12:31:20 | 000,000,000 | ---D | C] -- C:\Programme\ERUNT
[2010.04.18 12:30:46 | 000,791,393 | ---- | C] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\erunt_setup.exe
[2010.04.17 18:04:16 | 002,590,584 | ---- | C] (www.orbitdownloader.com ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OrbitDownloaderSetup.exe
[2010.04.13 17:44:50 | 000,999,160 | ---- | C] (BillP Studios) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\wpsetup.exe
[2010.04.13 17:43:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
[2010.04.13 17:35:20 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.04.13 17:31:20 | 000,444,416 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\TFC.exe
[2010.04.13 17:20:45 | 000,561,664 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
[2010.04.13 16:43:55 | 001,433,289 | ---- | C] (Old McDonald's Farm) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\aesetup2.4.exe
[2010.04.12 19:31:05 | 000,000,000 | ---D | C] -- C:\INFECTED
[2010.03.30 17:45:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\tbm
[2010.03.30 16:16:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Opera
[2010.03.30 16:08:39 | 000,000,000 | ---D | C] -- C:\Programme\Opera
[2010.03.30 15:41:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\Avira
[2010.03.30 15:38:47 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.03.30 15:38:47 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.03.30 15:38:47 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.03.30 15:38:47 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.03.30 15:38:45 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2010.03.30 15:38:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2010.01.05 18:07:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\ESET
[2008.07.04 10:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2007.08.14 12:36:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Apple
[2006.02.19 04:28:56 | 000,012,288 | ---- | C] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\Fonts\RandFont.dll
[2005.08.30 10:38:14 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft
[2005.08.30 10:38:13 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft
[2005.08.30 10:38:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft

========== Files - Modified Within 30 Days ==========

[2010.04.19 18:16:21 | 000,001,543 | ---- | M] () -- C:\WINDOWS\System32\Lucas Deecke_KBD.ini
[2010.04.19 18:15:34 | 000,000,298 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.04.19 18:15:20 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.04.19 18:14:48 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.19 18:14:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.19 18:14:41 | 1071,894,528 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.19 18:13:43 | 013,631,488 | -H-- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\NTUSER.DAT
[2010.04.19 18:13:43 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.ini
[2010.04.19 13:58:12 | 000,439,676 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2010.04.19 13:58:12 | 000,424,052 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.04.19 13:58:12 | 000,084,978 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2010.04.19 13:58:12 | 000,071,488 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.04.19 13:58:11 | 001,032,216 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.04.19 13:42:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.04.19 11:26:01 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.04.19 11:19:47 | 003,919,755 | R--- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Combo-Fix.exe
[2010.04.19 02:50:34 | 006,291,456 | -H-- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.04.18 12:30:47 | 000,791,393 | ---- | M] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\erunt_setup.exe
[2010.04.17 18:06:57 | 002,590,584 | ---- | M] (www.orbitdownloader.com ) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OrbitDownloaderSetup.exe
[2010.04.17 18:05:16 | 091,985,256 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Franco_Cinelli--Acid_Tracks-(TRAUT004)-WEB-2009-SiBERiA.rar.ob!
[2010.04.17 14:34:53 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.13 19:50:55 | 000,039,411 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\virus.jpg
[2010.04.13 17:44:53 | 000,999,160 | ---- | M] (BillP Studios) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\wpsetup.exe
[2010.04.13 17:31:22 | 000,444,416 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\TFC.exe
[2010.04.13 17:20:46 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\OTL.exe
[2010.04.13 16:44:08 | 001,433,289 | ---- | M] (Old McDonald's Farm) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\aesetup2.4.exe
[2010.04.13 16:36:47 | 045,942,928 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\setup_av462_free.exe
[2010.04.11 12:39:18 | 000,101,888 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.10 18:35:10 | 000,222,724 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\tbd.jpg
[2010.04.01 11:51:23 | 000,013,033 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Kalender.ods
[2010.04.01 11:01:27 | 000,000,529 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment.lnk
[2010.04.01 11:01:27 | 000,000,525 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared.lnk
[2010.04.01 11:01:27 | 000,000,501 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\AVSMedia.lnk
[2010.04.01 11:01:27 | 000,000,495 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Apple.lnk
[2010.04.01 11:01:27 | 000,000,495 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe.lnk
[2010.04.01 11:01:24 | 000,000,531 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\New Harry Potter and....lnk
[2010.04.01 11:00:33 | 000,000,521 | ---- | M] () -- C:\Programme\Apple Software Update.lnk
[2010.04.01 11:00:33 | 000,000,507 | ---- | M] () -- C:\Programme\Analog Devices.lnk
[2010.04.01 11:00:32 | 000,000,525 | ---- | M] () -- C:\Programme\New Harry Potter and....lnk
[2010.04.01 11:00:32 | 000,000,493 | ---- | M] () -- C:\Programme\Alcohol.lnk
[2010.04.01 11:00:32 | 000,000,493 | ---- | M] () -- C:\Programme\Ableton.lnk
[2010.04.01 11:00:32 | 000,000,489 | ---- | M] () -- C:\Programme\Adobe.lnk
[2010.04.01 11:00:20 | 000,000,517 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Application Data.lnk
[2010.04.01 11:00:20 | 000,000,515 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten.lnk
[2010.04.01 11:00:20 | 000,000,503 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\.limewire.lnk
[2010.04.01 11:00:20 | 000,000,501 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Contacts.lnk
[2010.04.01 11:00:16 | 000,000,503 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Favoriten.lnk
[2010.04.01 11:00:16 | 000,000,491 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\DRM.lnk
[2010.04.01 11:00:15 | 000,000,531 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\New Harry Potter and....lnk
[2010.04.01 11:00:15 | 000,000,515 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten.lnk
[2010.04.01 11:00:15 | 000,000,503 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente.lnk
[2010.04.01 11:00:15 | 000,000,499 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop.lnk
[2010.04.01 11:00:13 | 000,000,517 | ---- | M] () -- C:\Installationsdateien.lnk
[2010.04.01 11:00:12 | 000,000,531 | ---- | M] () -- C:\Dokumente und Einstellungen.lnk
[2010.04.01 11:00:12 | 000,000,523 | ---- | M] () -- C:\New Harry Potter and....lnk
[2010.04.01 11:00:12 | 000,000,503 | ---- | M] () -- C:\DesinfectLogs.lnk
[2010.04.01 11:00:12 | 000,000,501 | ---- | M] () -- C:\DVDVideoSoft.lnk
[2010.04.01 11:00:12 | 000,000,495 | ---- | M] () -- C:\Downloads.lnk
[2010.04.01 10:57:02 | 000,000,451 | ---- | M] () -- C:\WINDOWS\System32\1037.lnk
[2010.04.01 10:53:38 | 000,000,547 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$.lnk
[2010.04.01 10:53:38 | 000,000,543 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$.lnk
[2010.04.01 10:53:38 | 000,000,503 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB834707$.lnk
[2010.04.01 10:53:37 | 000,000,515 | ---- | M] () -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$.lnk
[2010.04.01 10:53:37 | 000,000,477 | ---- | M] () -- C:\WINDOWS\$hf_mig$.lnk
[2010.04.01 10:38:29 | 000,000,519 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen.lnk
[2010.04.01 10:38:29 | 000,000,505 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible.lnk
[2010.04.01 10:38:28 | 000,000,523 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos.lnk
[2010.04.01 10:38:28 | 000,000,515 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%.lnk
[2010.04.01 10:38:28 | 000,000,505 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Ableton.lnk
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\System32\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\System\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\System32\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\System\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Baca AQ.rtf
[2010.03.30 17:05:42 | 000,319,792 | ---- | M] (BitTorrent, Inc.) -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\utorrent.exe
[2010.03.30 16:05:17 | 000,000,964 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Meine freigegebenen Ordner.lnk
[2010.03.30 16:03:07 | 000,000,230 | ---- | M] () -- C:\WINDOWS\System32\spupdsvc.inf
[2010.03.30 15:39:06 | 000,001,671 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010.03.30 02:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.03.30 02:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

========== Files Created - No Company Name ==========

[2010.04.19 11:26:01 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.04.19 11:25:56 | 000,262,448 | ---- | C] () -- C:\cmldr
[2010.04.19 11:24:54 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.04.19 11:24:54 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.04.19 11:24:54 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.04.19 11:24:54 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.04.19 11:24:54 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.04.19 11:19:46 | 003,919,755 | R--- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Combo-Fix.exe
[2010.04.17 18:03:42 | 091,985,256 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Franco_Cinelli--Acid_Tracks-(TRAUT004)-WEB-2009-SiBERiA.rar.ob!
[2010.04.13 19:50:45 | 000,039,411 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\virus.jpg
[2010.04.13 16:33:57 | 045,942,928 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\setup_av462_free.exe
[2010.04.10 18:35:10 | 000,222,724 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\tbd.jpg
[2010.04.01 10:41:54 | 000,001,433 | ---- | C] () -- C:\WINDOWS\My name is Yuyun.rtf
[2010.04.01 10:41:54 | 000,001,433 | ---- | C] () -- C:\WINDOWS\Baca AQ.rtf
[2010.04.01 10:38:29 | 000,000,519 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen.lnk
[2010.04.01 10:38:29 | 000,000,505 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible.lnk
[2010.04.01 10:38:28 | 000,000,523 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos.lnk
[2010.04.01 10:38:28 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%.lnk
[2010.04.01 10:38:28 | 000,000,505 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Ableton.lnk
[2010.04.01 10:35:06 | 000,000,451 | ---- | C] () -- C:\WINDOWS\System32\1037.lnk
[2010.04.01 10:35:05 | 000,001,433 | ---- | C] () -- C:\WINDOWS\System32\My name is Yuyun.rtf
[2010.04.01 10:35:05 | 000,001,433 | ---- | C] () -- C:\WINDOWS\System\My name is Yuyun.rtf
[2010.04.01 10:35:05 | 000,001,433 | ---- | C] () -- C:\WINDOWS\System32\Baca AQ.rtf
[2010.04.01 10:35:05 | 000,001,433 | ---- | C] () -- C:\WINDOWS\System\Baca AQ.rtf
[2010.03.31 20:39:13 | 000,000,547 | ---- | C] () -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$.lnk
[2010.03.31 20:39:13 | 000,000,503 | ---- | C] () -- C:\WINDOWS\$NtUninstallKB834707$.lnk
[2010.03.31 20:39:12 | 000,000,543 | ---- | C] () -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$.lnk
[2010.03.31 20:39:12 | 000,000,515 | ---- | C] () -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$.lnk
[2010.03.31 20:39:12 | 000,000,477 | ---- | C] () -- C:\WINDOWS\$hf_mig$.lnk
[2010.03.31 20:37:35 | 000,000,529 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment
[2010.03.31 20:37:35 | 000,000,525 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared
[2010.03.31 20:37:35 | 000,000,501 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\AVSMedia
[2010.03.31 20:37:35 | 000,000,495 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Apple
[2010.03.31 20:37:35 | 000,000,495 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Adobe
[2010.03.31 20:37:34 | 000,000,531 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\New Harry Potter and....lnk
[2010.03.31 20:37:05 | 000,000,525 | ---- | C] () -- C:\Programme\New Harry Potter and....lnk
[2010.03.31 20:37:05 | 000,000,521 | ---- | C] () -- C:\Programme\Apple Software Update
[2010.03.31 20:37:05 | 000,000,507 | ---- | C] () -- C:\Programme\Analog Devices
[2010.03.31 20:37:05 | 000,000,493 | ---- | C] () -- C:\Programme\Alcohol
[2010.03.31 20:37:05 | 000,000,493 | ---- | C] () -- C:\Programme\Ableton
[2010.03.31 20:37:05 | 000,000,489 | ---- | C] () -- C:\Programme\Adobe
[2010.03.31 20:36:56 | 000,000,517 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Application Data
[2010.03.31 20:36:56 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten
[2010.03.31 20:36:56 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\.limewire
[2010.03.31 20:36:56 | 000,000,501 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Contacts
[2010.03.31 20:36:46 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Favoriten
[2010.03.31 20:36:46 | 000,000,503 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente
[2010.03.31 20:36:46 | 000,000,491 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\DRM
[2010.03.31 20:36:45 | 000,000,531 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\New Harry Potter and....lnk
[2010.03.31 20:36:45 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten
[2010.03.31 20:36:45 | 000,000,499 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop
[2010.03.31 20:36:43 | 000,000,531 | ---- | C] () -- C:\Dokumente und Einstellungen.lnk
[2010.03.31 20:36:43 | 000,000,517 | ---- | C] () -- C:\Installationsdateien.lnk
[2010.03.31 20:36:43 | 000,000,503 | ---- | C] () -- C:\DesinfectLogs.lnk
[2010.03.31 20:36:43 | 000,000,501 | ---- | C] () -- C:\DVDVideoSoft.lnk
[2010.03.31 20:36:43 | 000,000,495 | ---- | C] () -- C:\Downloads.lnk
[2010.03.31 20:36:42 | 000,000,523 | ---- | C] () -- C:\New Harry Potter and....lnk
[2010.03.30 16:03:07 | 000,000,230 | ---- | C] () -- C:\WINDOWS\System32\spupdsvc.inf
[2010.03.30 15:39:06 | 000,001,671 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2009.12.23 12:44:37 | 000,000,000 | ---- | C] () -- C:\Programme\Malware
[2009.09.04 16:51:10 | 000,017,162 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\hs_err_pid5248.log
[2009.02.26 17:56:51 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.01.14 23:36:24 | 000,000,211 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Anwendungsdaten\AVSMediaPlayer.m3u
[2008.04.20 15:19:30 | 000,002,686 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\_GEAREXT.WO_IDENT.TXT
[2008.03.03 10:39:28 | 000,000,145 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008.03.03 10:21:39 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008.03.03 10:21:16 | 000,000,140 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2008.03.03 10:20:00 | 000,000,957 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2008.03.03 10:05:23 | 000,001,076 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log
[2007.12.10 20:20:06 | 000,001,359 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache
[2007.06.07 00:49:09 | 000,000,050 | ---- | C] () -- C:\WINDOWS\StreamRipper32.INI
[2007.06.07 00:41:33 | 000,000,357 | ---- | C] () -- C:\WINDOWS\sripper.ini
[2007.05.08 14:51:31 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2007.04.21 00:48:44 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2007.04.20 09:31:20 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2007.04.19 12:03:56 | 000,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2007.04.19 12:03:56 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2007.02.08 15:31:20 | 000,001,413 | ---- | C] () -- C:\WINDOWS\System32\WLAN.INI
[2007.02.08 15:26:33 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\IsUser11b.dll
[2006.11.27 00:35:13 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI
[2006.11.20 20:15:35 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2006.11.20 20:15:35 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2006.11.17 20:06:26 | 000,135,419 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\AdobeFnt10.lst
[2006.10.25 23:44:18 | 000,101,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.10.25 23:02:11 | 000,001,543 | ---- | C] () -- C:\WINDOWS\System32\Lucas Deecke_KBD.ini
[2006.10.25 23:01:48 | 013,631,488 | -H-- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\NTUSER.DAT
[2006.10.25 23:01:48 | 000,001,024 | -H-- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.dat.LOG
[2006.10.25 23:01:48 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\Lucas Deecke\ntuser.ini
[2006.10.25 23:01:36 | 000,262,144 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\NTUSER.DAT
[2006.10.25 23:01:36 | 000,001,024 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\NTUSER.DAT.LOG
[2006.05.11 11:26:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006.03.31 23:00:35 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.ini
[2005.09.03 15:38:37 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2005.08.30 19:19:29 | 000,000,638 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005.08.30 19:18:48 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2005.08.30 10:44:34 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI
[2005.08.30 10:44:32 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI
[2005.08.30 10:44:32 | 000,002,700 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI
[2005.08.30 10:44:32 | 000,002,596 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI
[2005.08.30 10:44:32 | 000,002,554 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI
[2005.08.30 10:44:32 | 000,002,461 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI
[2005.08.30 10:44:32 | 000,002,237 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI
[2005.08.30 10:44:32 | 000,001,886 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI
[2005.08.30 10:44:32 | 000,001,820 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI
[2005.08.30 10:44:32 | 000,001,811 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI
[2005.08.30 10:44:32 | 000,001,690 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI
[2005.08.30 10:44:32 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI
[2005.08.30 10:44:32 | 000,001,332 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI
[2005.08.30 10:44:31 | 000,001,690 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI
[2005.08.30 10:44:26 | 000,043,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\RITCPT.SYS
[2005.08.30 10:44:16 | 000,005,088 | ---- | C] () -- C:\WINDOWS\System32\drivers\FBAPI.sys
[2005.08.30 10:43:12 | 000,004,300 | ---- | C] () -- C:\WINDOWS\System32\MEMIO.SYS
[2005.07.08 19:21:48 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\AVS3_Resource.dll
[2005.06.08 16:58:10 | 000,017,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWFilter.sys
[2005.06.08 16:58:08 | 000,035,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\WOWXT_kern_i386.sys
[2005.06.08 16:58:08 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSXT_kern_i386.sys
[2005.04.11 10:12:52 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImageIODll.dll
[2005.04.11 10:12:50 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ImageAlbumSave.dll
[2005.02.26 13:33:04 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\AVSAudioWideStereoDMO.dll
[2001.07.07 04:00:00 | 000,003,254 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

========== Custom Scans ==========


< C:\*.rtf /s >
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DesinfectLogs\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DesinfectLogs\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Default User\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Default User\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\My name is Yuyun.rtf
[2007.04.25 11:55:50 | 000,001,127 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Musik\musik.rtf
[2006.11.30 00:51:56 | 000,003,255 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\Chemie\06-11-28Versuche.rtf
[2006.11.22 18:39:28 | 000,054,050 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\Economics\06-11-21Worksheet.rtf
[2006.11.01 09:02:01 | 000,005,885 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\Englisch\06-10-XKurzgeschichte.rtf
[2006.12.15 12:47:01 | 000,004,467 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\Englisch\0612deathpenalty.rtf
[2006.11.26 22:17:42 | 004,374,316 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\physics\06-11-21Crater.rtf
[2006.12.15 12:37:41 | 000,003,131 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Desktop\Eigene Dateien\Schule\england\tok\06-11-22EssayPerception.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Ableton\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Downloads\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Downloads\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Filme\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Filme\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\licenses\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\licenses\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\readmes\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\readmes\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Updater\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Updater\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\NetworkService\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Dokumente und Einstellungen\NetworkService\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Downloads\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Downloads\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DVDVideoSoft\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DVDVideoSoft\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DVDVideoSoft\Temp\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\DVDVideoSoft\Temp\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\Omegadriver\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\Omegadriver\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\Soundtreiber DigitalMAX2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\Soundtreiber DigitalMAX2\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\WirelasscardDriver\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Installationsdateien\WirelasscardDriver\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Intel\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Intel\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Intel\Intel® PRO Wireless Network Connection ID Tool\Baca AQ.rtf
[2001.11.16 23:44:38 | 000,011,735 | ---- | M] () -- C:\Intel\Intel® PRO Wireless Network Connection ID Tool\INTEL SOFTWARE LICENSE AGREEMENT.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Intel\Intel® PRO Wireless Network Connection ID Tool\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Ableton\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Ableton\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Adobe\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Adobe\My name is Yuyun.rtf
[2003.07.28 16:30:02 | 000,045,157 | ---- | M] () -- C:\Programme\Adobe\Audition 1.0\AuditionReadme.rtf
[2003.07.30 15:52:16 | 000,035,870 | R--- | M] () -- C:\Programme\Adobe\Audition 1.0\Legal\USEnglish.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Alcohol\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Alcohol\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Analog Devices\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Analog Devices\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Apple Software Update\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Apple Software Update\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\ATI Technologies\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\ATI Technologies\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Audacity\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Audacity\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\AVIcodec\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\AVIcodec\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Avira\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Avira\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\AVOne\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\AVOne\My name is Yuyun.rtf
[2008.12.12 12:11:58 | 000,004,963 | ---- | M] () -- C:\Programme\Bonjour\About Bonjour.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Bonjour\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Bonjour\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Broadcom\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Broadcom\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\CCleaner\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\CCleaner\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Cubase LE\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Cubase LE\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Cubase\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Cubase\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\CyberLink\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\CyberLink\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Daemontools Light\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Daemontools Light\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\dBpoweramp\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\dBpoweramp\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\devolo\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\devolo\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\DivX\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\DivX\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\File Scanner Library (Spybot - Search & Destroy)\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\File Scanner Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\FlashFXP\Baca AQ.rtf
[2006.05.25 14:48:48 | 000,008,480 | ---- | M] () -- C:\Programme\FlashFXP\License Agreement.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\FlashFXP\My name is Yuyun.rtf
[2006.05.25 14:48:30 | 000,002,964 | ---- | M] () -- C:\Programme\FlashFXP\Readme.rtf
[2006.06.20 21:21:12 | 000,007,679 | ---- | M] () -- C:\Programme\FlashFXP\What's New.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Fraps\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Fraps\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Free Audio Converter\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Free Audio Converter\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\GameOS\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\GameOS\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Google\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Google\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Hewlett-Packard\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Hewlett-Packard\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\HP\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\HP\My name is Yuyun.rtf
[2005.08.05 06:31:10 | 000,005,248 | R--- | M] () -- C:\Programme\HP\Digital Imaging\Source\SharpZip\Readme.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\ICQ\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\ICQ\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\IEEE 802.11 WIRELESS LAN\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\IEEE 802.11 WIRELESS LAN\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Illustrate\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Illustrate\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Image-Line\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Image-Line\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\InstallShield Installation Information\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\InstallShield Installation Information\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Intel\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Intel\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Internet Explorer\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Internet Explorer\My name is Yuyun.rtf
[2009.09.21 16:35:52 | 000,059,083 | ---- | M] () -- C:\Programme\iPod\Acknowledgements.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\iPod\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\iPod\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\IrfanView\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\IrfanView\My name is Yuyun.rtf
[2009.09.21 16:35:50 | 000,059,083 | ---- | M] () -- C:\Programme\iTunes\Acknowledgements.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\iTunes\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\iTunes\My name is Yuyun.rtf
[2009.09.21 16:35:52 | 000,009,479 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\About iTunes.rtf
[2009.09.21 16:36:18 | 000,002,224 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\AboutBox.rtf
[2009.09.21 16:36:20 | 000,000,924 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\GoogleLicense.rtf
[2009.09.21 16:36:20 | 000,072,699 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\iPhone License.rtf
[2009.09.21 16:36:20 | 000,016,890 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\iPod License.rtf
[2009.09.21 16:36:20 | 000,069,499 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\iPod touch License.rtf
[2009.09.21 16:36:20 | 000,029,734 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\License.rtf
[2009.09.21 16:36:20 | 000,000,987 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\da.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,010,560 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\About iTunes.rtf
[2009.09.21 16:36:20 | 000,002,256 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\AboutBox.rtf
[2009.09.21 16:36:20 | 000,000,950 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\GoogleLicense.rtf
[2009.09.21 16:36:20 | 000,077,186 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\iPhone License.rtf
[2009.09.21 16:36:20 | 000,020,416 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\iPod License.rtf
[2009.09.21 16:36:20 | 000,076,309 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\iPod touch License.rtf
[2009.09.21 16:36:20 | 000,033,166 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\License.rtf
[2009.09.21 16:36:22 | 000,001,204 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\de.lproj\YahooLicense.rtf
[2009.09.21 16:35:50 | 000,008,547 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\About iTunes.rtf
[2009.09.21 16:36:10 | 000,002,066 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\AboutBox.rtf
[2009.09.21 16:36:10 | 000,000,909 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\GoogleLicense.rtf
[2009.09.21 16:36:10 | 000,069,399 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\iPhone License.rtf
[2009.09.21 16:36:10 | 000,016,088 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\iPod License.rtf
[2009.09.21 16:36:10 | 000,067,257 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\iPod touch License.rtf
[2009.09.21 16:36:10 | 000,026,995 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\License.rtf
[2009.09.21 16:36:10 | 000,001,062 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,008,511 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\About iTunes.rtf
[2009.09.21 16:36:22 | 000,002,066 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\AboutBox.rtf
[2009.09.21 16:36:22 | 000,000,909 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\GoogleLicense.rtf
[2009.09.21 16:36:22 | 000,069,399 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\iPhone License.rtf
[2009.09.21 16:36:22 | 000,016,088 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\iPod License.rtf
[2009.09.21 16:36:22 | 000,067,257 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\iPod touch License.rtf
[2009.09.21 16:36:22 | 000,026,995 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\License.rtf
[2009.09.21 16:36:22 | 000,001,062 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\en_GB.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,010,970 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\About iTunes.rtf
[2009.09.21 16:36:22 | 000,002,192 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\AboutBox.rtf
[2009.09.21 16:36:22 | 000,000,970 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\GoogleLicense.rtf
[2009.09.21 16:36:22 | 000,074,856 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\iPhone License.rtf
[2009.09.21 16:36:24 | 000,019,954 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\iPod License.rtf
[2009.09.21 16:36:24 | 000,074,157 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\iPod touch License.rtf
[2009.09.21 16:36:24 | 000,031,680 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\License.rtf
[2009.09.21 16:36:24 | 000,001,164 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\es.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,009,684 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\About iTunes.rtf
[2009.09.21 16:36:24 | 000,002,368 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\AboutBox.rtf
[2009.09.21 16:36:24 | 000,001,028 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\GoogleLicense.rtf
[2009.09.21 16:36:26 | 000,072,493 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\iPhone License.rtf
[2009.09.21 16:36:26 | 000,017,122 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\iPod License.rtf
[2009.09.21 16:36:26 | 000,071,771 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\iPod touch License.rtf
[2009.09.21 16:36:26 | 000,030,415 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\License.rtf
[2009.09.21 16:36:26 | 000,001,028 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fi.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,011,932 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\About iTunes.rtf
[2009.09.21 16:36:26 | 000,002,377 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\AboutBox.rtf
[2009.09.21 16:36:26 | 000,001,071 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\GoogleLicense.rtf
[2009.09.21 16:36:26 | 000,078,749 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\iPhone License.rtf
[2009.09.21 16:36:26 | 000,021,733 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\iPod License.rtf
[2009.09.21 16:36:28 | 000,078,445 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\iPod touch License.rtf
[2009.09.21 16:36:28 | 000,033,568 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\License.rtf
[2009.09.21 16:36:28 | 000,001,239 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\fr.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,009,800 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\About iTunes.rtf
[2009.09.21 16:36:28 | 000,002,085 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\AboutBox.rtf
[2009.09.21 16:36:28 | 000,001,061 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\GoogleLicense.rtf
[2009.09.21 16:36:28 | 000,071,507 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\iPhone License.rtf
[2009.09.21 16:36:28 | 000,018,957 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\iPod License.rtf
[2009.09.21 16:36:28 | 000,069,255 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\iPod touch License.rtf
[2009.09.21 16:36:30 | 000,031,190 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\License.rtf
[2009.09.21 16:36:30 | 000,001,141 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\it.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,028,535 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\About iTunes.rtf
[2009.09.21 16:36:30 | 000,006,149 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\AboutBox.rtf
[2009.09.21 16:36:30 | 000,002,485 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\GoogleLicense.rtf
[2009.09.21 16:36:30 | 000,203,857 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\iPhone License.rtf
[2009.09.21 16:36:30 | 000,055,787 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\iPod License.rtf
[2009.09.21 16:36:30 | 000,198,852 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\iPod touch License.rtf
[2009.09.21 16:36:32 | 000,097,410 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\License.rtf
[2009.09.21 16:36:32 | 000,003,005 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ja.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,021,372 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\About iTunes.rtf
[2009.09.21 16:36:32 | 000,004,001 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\AboutBox.rtf
[2009.09.21 16:36:32 | 000,001,930 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\GoogleLicense.rtf
[2009.09.21 16:36:32 | 000,170,134 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\iPhone License.rtf
[2009.09.21 16:36:32 | 000,047,642 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\iPod License.rtf
[2009.09.21 16:36:34 | 000,169,108 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\iPod touch License.rtf
[2009.09.21 16:36:34 | 000,074,076 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\License.rtf
[2009.09.21 16:36:34 | 000,002,431 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ko.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,010,522 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\About iTunes.rtf
[2009.09.21 16:36:34 | 000,002,150 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\AboutBox.rtf
[2009.09.21 16:36:34 | 000,000,854 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\GoogleLicense.rtf
[2009.09.21 16:36:34 | 000,071,299 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\iPhone License.rtf
[2009.09.21 16:36:34 | 000,017,811 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\iPod License.rtf
[2009.09.21 16:36:34 | 000,070,463 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\iPod touch License.rtf
[2009.09.21 16:36:36 | 000,035,595 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\License.rtf
[2009.09.21 16:36:36 | 000,001,021 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nb.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,010,938 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\About iTunes.rtf
[2009.09.21 16:36:36 | 000,002,431 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\AboutBox.rtf
[2009.09.21 16:36:36 | 000,001,054 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\GoogleLicense.rtf
[2009.09.21 16:36:36 | 000,073,873 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\iPhone License.rtf
[2009.09.21 16:36:36 | 000,019,383 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\iPod License.rtf
[2009.09.21 16:36:36 | 000,073,036 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\iPod touch License.rtf
[2009.09.21 16:36:38 | 000,033,500 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\License.rtf
[2009.09.21 16:36:38 | 000,001,210 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\nl.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,017,983 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\About iTunes.rtf
[2009.09.21 16:36:38 | 000,002,372 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\AboutBox.rtf
[2009.09.21 16:36:38 | 000,001,016 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\GoogleLicense.rtf
[2009.09.21 16:36:38 | 000,069,399 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\iPhone License.rtf
[2009.09.21 16:36:38 | 000,016,088 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\iPod License.rtf
[2009.09.21 16:36:38 | 000,067,257 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\iPod touch License.rtf
[2009.09.21 16:36:38 | 000,041,324 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\License.rtf
[2009.09.21 16:36:40 | 000,001,141 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pl.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,010,766 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\About iTunes.rtf
[2009.09.21 16:36:40 | 000,002,244 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\AboutBox.rtf
[2009.09.21 16:36:40 | 000,001,012 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\GoogleLicense.rtf
[2009.09.21 16:36:40 | 000,075,110 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\iPhone License.rtf
[2009.09.21 16:36:40 | 000,020,283 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\iPod License.rtf
[2009.09.21 16:36:40 | 000,074,630 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\iPod touch License.rtf
[2009.09.21 16:36:40 | 000,031,771 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\License.rtf
[2009.09.21 16:36:42 | 000,001,176 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,011,656 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\About iTunes.rtf
[2009.09.21 16:36:42 | 000,002,362 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\AboutBox.rtf
[2009.09.21 16:36:42 | 000,001,104 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\GoogleLicense.rtf
[2009.09.21 16:36:42 | 000,074,213 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\iPhone License.rtf
[2009.09.21 16:36:42 | 000,021,006 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\iPod License.rtf
[2009.09.21 16:36:42 | 000,073,337 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\iPod touch License.rtf
[2009.09.21 16:36:42 | 000,032,744 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\License.rtf
[2009.09.21 16:36:44 | 000,001,189 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\pt_PT.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,027,613 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\About iTunes.rtf
[2009.09.21 16:36:44 | 000,035,907 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\AboutBox.rtf
[2009.09.21 16:36:44 | 000,030,877 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\GoogleLicense.rtf
[2009.09.21 16:36:44 | 000,213,236 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\iPhone License.rtf
[2009.09.21 16:36:44 | 000,113,567 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\iPod License.rtf
[2009.09.21 16:36:44 | 000,364,636 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\iPod touch License.rtf
[2009.09.21 16:36:44 | 000,132,819 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\License.rtf
[2009.09.21 16:36:46 | 000,032,330 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\ru.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,009,835 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\About iTunes.rtf
[2009.09.21 16:36:46 | 000,002,379 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\AboutBox.rtf
[2009.09.21 16:36:46 | 000,000,961 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\GoogleLicense.rtf
[2009.09.21 16:36:48 | 000,072,442 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\iPhone License.rtf
[2009.09.21 16:36:48 | 000,017,720 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\iPod License.rtf
[2009.09.21 16:36:48 | 000,071,388 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\iPod touch License.rtf
[2009.09.21 16:36:48 | 000,030,797 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\License.rtf
[2009.09.21 16:36:48 | 000,001,136 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\sv.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,017,477 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\About iTunes.rtf
[2009.09.21 16:36:48 | 000,003,669 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\AboutBox.rtf
[2009.09.21 16:36:48 | 000,001,571 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\GoogleLicense.rtf
[2009.09.21 16:36:48 | 000,073,133 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\iPhone License.rtf
[2009.09.21 16:36:48 | 000,032,474 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\iPod License.rtf
[2009.09.21 16:36:48 | 000,072,073 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\iPod touch License.rtf
[2009.09.21 16:36:50 | 000,055,878 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\License.rtf
[2009.09.21 16:36:50 | 000,001,910 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_CN.lproj\YahooLicense.rtf
[2009.09.21 16:35:52 | 000,016,599 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\About iTunes.rtf
[2009.09.21 16:36:50 | 000,003,596 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\AboutBox.rtf
[2009.09.21 16:36:52 | 000,001,288 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\GoogleLicense.rtf
[2009.09.21 16:36:52 | 000,127,683 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\iPhone License.rtf
[2009.09.21 16:36:52 | 000,032,348 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\iPod License.rtf
[2009.09.21 16:36:52 | 000,126,557 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\iPod touch License.rtf
[2009.09.21 16:36:52 | 000,058,729 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\License.rtf
[2009.09.21 16:36:54 | 000,001,486 | ---- | M] () -- C:\Programme\iTunes\iTunes.Resources\zh_TW.lproj\YahooLicense.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Java\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Java\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\K-Lite Codec Pack\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\K-Lite Codec Pack\My name is Yuyun.rtf
[2009.02.12 12:00:00 | 000,008,329 | ---- | M] () -- C:\Programme\K-Lite Codec Pack\Info\readme.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Lavasoft\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Lavasoft\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\LimeWire\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\LimeWire\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Logitech\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Logitech\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Macromedia\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Macromedia\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MagicISO\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MagicISO\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Malwarebytes' Anti-Malware\Baca AQ.rtf
[2010.03.29 18:11:08 | 000,001,705 | ---- | M] () -- C:\Programme\Malwarebytes' Anti-Malware\changes.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Malwarebytes' Anti-Malware\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Medieval CUE Splitter\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Medieval CUE Splitter\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Messenger Plus!\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Messenger Plus!\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Messenger\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Messenger\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Microsoft CAPICOM 2.1.0.2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Microsoft CAPICOM 2.1.0.2\My name is Yuyun.rtf
[2007.02.26 17:16:26 | 000,134,577 | ---- | M] () -- C:\Programme\Microsoft CAPICOM 2.1.0.2\License\license.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\microsoft frontpage\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\microsoft frontpage\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Microsoft SQL Server\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Microsoft SQL Server\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\mIRC\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\mIRC\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Misc. Support Library (Spybot - Search & Destroy)\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Misc. Support Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Movie Maker\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Movie Maker\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Firefox\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Firefox\My name is Yuyun.rtf
[2007.03.30 10:43:58 | 000,149,569 | ---- | M] () -- C:\Programme\Mozilla Firefox\plugins\WMP Firefox Plugin License.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Sunbird\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Sunbird\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Thunderbird\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Mozilla Thunderbird\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MSN Gaming Zone\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MSN Gaming Zone\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MSXML 4.0\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MSXML 4.0\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MultiRes\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\MultiRes\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Native Instruments\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Native Instruments\My name is Yuyun.rtf
[2009.03.25 15:26:42 | 000,023,927 | ---- | M] () -- C:\Programme\Native Instruments\Traktor\Documentation\License Agreement\License.rtf
[2009.03.25 15:26:42 | 000,054,331 | ---- | M] () -- C:\Programme\Native Instruments\Traktor\Documentation\License Agreement\ThirdPartiesSoftwareLicenses.rtf
[2009.03.25 15:26:42 | 000,016,082 | ---- | M] () -- C:\Programme\Native Instruments\Traktor\Documentation\License Agreement\ThirdPartyContent.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\NetMeeting\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\NetMeeting\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 2.2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 2.2\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 2.4\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 2.4\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 3\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\OpenOffice.org 3\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Opera\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Opera\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Orbitdownloader\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Orbitdownloader\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Outlook Express\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Outlook Express\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Phoenix Technologies Ltd\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Phoenix Technologies Ltd\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\PIC\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\PIC\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\QuickTime\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\QuickTime\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Radeon Omega Driver\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Radeon Omega Driver\My name is Yuyun.rtf
[2004.07.27 21:57:28 | 000,004,926 | ---- | M] () -- C:\Programme\Radeon Omega Driver\v4.8.442\ATI Tray Tools\License.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Rapid Evolution\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Rapid Evolution\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\RegCleaner\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\RegCleaner\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Samsung\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Samsung\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\SDHelper (Spybot - Search & Destroy)\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\SDHelper (Spybot - Search & Destroy)\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Skype\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Skype\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sony Vegas\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sony Vegas\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sony\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sony\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sound Forge\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Sound Forge\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Spybot - Search & Destroy\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\SRS Labs\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\SRS Labs\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Syncrosoft\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Syncrosoft\My name is Yuyun.rtf
[2005.10.20 13:53:02 | 000,051,397 | ---- | M] () -- C:\Programme\Syncrosoft\LCC\Release Notes.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Teamspeak2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Teamspeak2\My name is Yuyun.rtf
[2004.01.17 18:41:56 | 000,026,598 | ---- | M] () -- C:\Programme\Teamspeak2\manual\RC2servermanual-css.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\TeaTimer (Spybot - Search & Destroy)\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\TeaTimer (Spybot - Search & Destroy)\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Tortun\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Tortun\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Uninstall Information\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Uninstall Information\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\VideoLAN\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\VideoLAN\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\WaveLab\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\WaveLab\My name is Yuyun.rtf
[2004.06.06 13:36:40 | 000,002,366 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\cdText1.rtf
[2004.06.06 13:36:40 | 000,002,431 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\cdTotal1.rtf
[2004.06.06 13:36:40 | 000,002,428 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\cdTotal2.rtf
[2004.06.06 13:36:40 | 000,002,432 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\cdTotalB.rtf
[2004.06.06 13:36:40 | 000,002,137 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\comment1.rtf
[2004.06.06 13:36:40 | 000,003,292 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\Header1.rtf
[2004.06.06 13:36:40 | 000,003,898 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\Header2.rtf
[2004.06.06 13:36:40 | 000,002,164 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\leadOut1.rtf
[2004.06.06 13:36:40 | 000,002,161 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\leadOut2.rtf
[2004.06.06 13:36:40 | 000,002,165 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\leadOutB.rtf
[2004.06.06 13:36:40 | 000,002,352 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\mainCdText1.rtf
[2004.06.06 13:36:40 | 000,002,516 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\pause1.rtf
[2004.06.06 13:36:40 | 000,002,516 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\pauseB.rtf
[2004.06.06 13:36:40 | 000,002,531 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\subIndex1.rtf
[2004.06.06 13:36:40 | 000,002,555 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\subIndex2.rtf
[2004.06.06 13:36:40 | 000,002,531 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\subIndexB.rtf
[2004.06.06 13:36:40 | 000,002,661 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackHeader1.rtf
[2004.06.06 13:36:40 | 000,002,524 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackStart1.rtf
[2004.06.06 13:36:40 | 000,002,548 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackStart2.rtf
[2004.06.06 13:36:40 | 000,002,524 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackStartB.rtf
[2004.06.06 13:36:40 | 000,002,673 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackTableHeader1.rtf
[2004.06.06 13:36:40 | 000,002,737 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackTableHeader2.rtf
[2004.06.06 13:36:40 | 000,002,275 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackTotal1.rtf
[2004.06.06 13:36:40 | 000,002,274 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\English\trackTotal2.rtf
[2004.07.31 21:15:54 | 000,002,425 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\cdText1.rtf
[2004.07.31 21:15:54 | 000,002,490 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\cdTotal1.rtf
[2004.07.31 21:15:54 | 000,002,487 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\cdTotal2.rtf
[2004.07.31 21:15:54 | 000,002,491 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\cdTotalB.rtf
[2004.07.31 21:15:54 | 000,002,196 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\comment1.rtf
[2004.07.31 21:15:54 | 000,003,292 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\Header1.rtf
[2004.07.31 21:15:54 | 000,003,898 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\Header2.rtf
[2004.07.31 21:15:54 | 000,002,223 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\leadOut1.rtf
[2004.07.31 21:15:54 | 000,002,220 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\leadOut2.rtf
[2004.07.31 21:15:54 | 000,002,224 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\leadOutB.rtf
[2004.07.31 21:15:54 | 000,002,411 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\mainCdText1.rtf
[2004.07.31 21:15:54 | 000,002,575 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\pause1.rtf
[2004.07.31 21:15:54 | 000,002,575 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\pauseB.rtf
[2004.07.31 21:15:54 | 000,002,590 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\subIndex1.rtf
[2004.07.31 21:15:54 | 000,002,614 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\subIndex2.rtf
[2004.07.31 21:15:54 | 000,002,590 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\subIndexB.rtf
[2004.07.31 21:15:54 | 000,002,720 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackHeader1.rtf
[2004.07.31 21:15:54 | 000,002,583 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackStart1.rtf
[2004.07.31 21:15:54 | 000,002,607 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackStart2.rtf
[2004.07.31 21:15:54 | 000,002,583 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackStartB.rtf
[2004.07.31 21:15:54 | 000,002,732 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackTableHeader1.rtf
[2004.07.31 21:15:54 | 000,002,796 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackTableHeader2.rtf
[2004.07.31 21:15:54 | 000,002,334 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackTotal1.rtf
[2004.07.31 21:15:54 | 000,002,333 | ---- | M] () -- C:\Programme\WaveLab\Presets\AudioCdReport\Japanese\trackTotal2.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Western Digital\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Western Digital\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Winamp\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Winamp\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Live\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Live\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Media Connect 2\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Media Connect 2\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Media Player\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows Media Player\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows NT\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Windows NT\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\WindowsUpdate\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\WindowsUpdate\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Winrar\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Winrar\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\xerox\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\xerox\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Xvid\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Xvid\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Yahoo!\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Yahoo!\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Youtube Converter\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Youtube Converter\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Zero G Registry\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Programme\Zero G Registry\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Temp\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\Temp\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$hf_mig$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$hf_mig$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB834707$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB834707$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB867282$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB867282$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB873339$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB873339$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB883523$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB883523$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB884575$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB884575$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885250$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885250$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885835$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885835$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885836$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB885836$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB886185$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB886185$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB887472$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB887472$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB888113$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB888113$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB888302$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB888302$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890046$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890046$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890175$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890175$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890859$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB890859$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB891781$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB891781$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB893756$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB893756$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB894391$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB894391$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896358$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896358$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896423$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896423$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896424$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896424$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896428$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB896428$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB898461$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB898461$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB899587$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB899587$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB899591$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB899591$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB900485$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB900485$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB900725$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB900725$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB901017$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB901017$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB901214$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB901214$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB902400$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB902400$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB904706$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB904706$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB904942$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB904942$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB905414$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB905414$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB905749$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB905749$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB908519$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB908519$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB908531$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB908531$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB910437$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB910437$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911280$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911280$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911562$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911562$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911564$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911564$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911567$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911567$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911927$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB911927$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB912919$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB912919$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB913580$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB913580$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914388$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914388$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914389$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914389$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914440$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB914440$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB915865$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB915865$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB916595$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB916595$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917344$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917344$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917422$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917422$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917734_WMP10$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917734_WMP10$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917953$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB917953$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918118$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918118$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918439$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918439$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918899$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB918899$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB919007$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB919007$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920213$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920213$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920214$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920214$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920670$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920670$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920683$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920683$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920685$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920685$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920872$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB920872$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921398$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921398$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921503$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921503$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921883$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB921883$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922582$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922582$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922616$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922616$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922760$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922760$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922819$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB922819$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923191$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923191$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923414$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923414$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923561$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923561$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923689$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923689$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923694$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923694$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923980$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB923980$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924191$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924191$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924270$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924270$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924496$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924496$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924667$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB924667$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925398_WMP64$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925398_WMP64$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925454$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925454$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925486$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925486$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925902$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB925902$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926239$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926239$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926255$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926255$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926436$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB926436$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927779$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927779$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927802$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927802$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927891$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB927891$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928090$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928090$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928255$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928255$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928843$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB928843$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929123$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929123$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929338$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929338$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929399$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929399$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929969$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB929969$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB930178$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB930178$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB930916$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB930916$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931261$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931261$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931768$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931768$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931784$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931784$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931836$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB931836$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB932168$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB932168$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB932823-v3$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB932823-v3$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933360$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933360$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933566$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933566$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933729$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB933729$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB935839$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB935839$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB935840$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB935840$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936021$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936021$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936357$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936357$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936782_WMP11$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB936782_WMP11$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB937143$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB937143$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938127$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938127$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938464$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938464$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938828$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938828$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938829$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB938829$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB939653$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB939653$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB939683$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB939683$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941202$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941202$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941568$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941568$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941569$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941569$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941644$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941644$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941693$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB941693$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942615$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942615$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942763$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942763$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942840$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB942840$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943055$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943055$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943460$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943460$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943485$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB943485$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB944533$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB944533$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB944653$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB944653$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB945553$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB945553$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946026$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946026$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946627$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946627$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946648$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB946648$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB948590$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB948590$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB948881$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB948881$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950749$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950749$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950760$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950760$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950762$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950762$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950974$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB950974$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951066$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951066$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951072-v2$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951072-v2$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951376$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951376$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951376-v2$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951376-v2$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951698$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951698$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951748$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB951748$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952004$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952004$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952069_WM9$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952069_WM9$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952287$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952287$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952954$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB952954$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB953839$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB953839$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954154_WM11$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954154_WM11$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954211$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954211$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954600$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB954600$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB955069$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB955069$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB955839$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB955839$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956391$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956391$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956572$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956572$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956802$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956802$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956803$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956803$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956841$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB956841$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB957095$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB957095$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB957097$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB957097$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958644$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958644$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958687$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958687$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958690$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB958690$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB959426$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB959426$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB959772_WM11$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB959772_WM11$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960225$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960225$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960715$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960715$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960803$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB960803$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB961373$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB961373$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB961501$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB961501$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB967715$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB967715$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB968537$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB968537$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB969898$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB969898$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB970238$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallKB970238$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallMSCompPackV1$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallMSCompPackV1$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWdf01005$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWdf01005$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWMFDist11$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWMFDist11$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallwmp11$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallwmp11$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWudf01000$\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\$NtUninstallWudf01000$\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\.jagex_cache_32\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\.jagex_cache_32\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\addins\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\addins\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\amana_asset\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\amana_asset\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\AppPatch\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\AppPatch\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\assembly\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\assembly\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Config\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Config\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Connection Wizard\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Connection Wizard\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Cursors\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Cursors\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Debug\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Debug\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Docs\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Docs\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Downloaded Installations\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Downloaded Installations\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Downloaded Program Files\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Downloaded Program Files\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Driver Cache\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Driver Cache\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Fonts\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Fonts\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Help\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Help\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\I386_old\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\I386_old\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\ie7updates\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\ie7updates\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\ime\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\ime\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\inf\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\inf\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Installer\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Installer\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\java\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\java\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Logs\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Logs\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Media\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Media\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Microsoft.NET\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Microsoft.NET\My name is Yuyun.rtf
[2003.01.08 11:38:46 | 000,011,923 | ---- | M] () -- C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\EULA.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Minidump\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Minidump\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\msagent\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\msagent\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\msapps\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\msapps\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\mui\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\mui\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\network diagnostic\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\network diagnostic\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Offline Web Pages\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Offline Web Pages\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Options\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Options\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\pchealth\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\pchealth\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\PeerNet\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\PeerNet\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\PIF\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\PIF\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Prefetch\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Prefetch\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Provisioning\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Provisioning\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\pss\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\pss\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\RegisteredPackages\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\RegisteredPackages\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Registration\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Registration\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\repair\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\repair\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Resources\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Resources\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SBM\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SBM\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SEC\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SEC\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\security\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\security\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SoftwareDistribution\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\SoftwareDistribution\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\srchasst\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\srchasst\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Sun\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Sun\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\system\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\system\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\system32\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\system32\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\twain_32\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\twain_32\My name is Yuyun.rtf
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\UMediaPlayerActiveXPlugin\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\UMediaPlayerActiveXPlugin\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\usb-audio.deMaya44\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\usb-audio.deMaya44\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\WBEM\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\WBEM\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Web\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\Web\My name is Yuyun.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\WinSxS\Baca AQ.rtf
[2010.03.31 20:36:42 | 000,001,433 | ---- | M] () -- C:\WINDOWS\WinSxS\My name is Yuyun.rtf

< F:\*.rtf /s >
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\My name is Yuyun.2.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Action Plans\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Action Plans\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\intro for new volunteers\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\intro for new volunteers\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Minutes from Meetings\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Minutes from Meetings\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Resources\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Resources\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Schools' Programme\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Schools' Programme\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Winneba project\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Winneba project\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Yeji materials\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Yeji materials\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\curice\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\curice\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\SVETEJEBLO\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\SVETEJEBLO\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\TUGOMOJAAA\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\.Trash-500\files\TUGOMOJAAA\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\annette cookey\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\annette cookey\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\bigiano\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\bigiano\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\Idibia\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\Idibia\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\iyanya's single\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\iyanya's single\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\kelli hansom\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\kelli hansom\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\M.I\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\9ja\M.I\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\ADOBE AUDITION SOFTS\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\ADOBE AUDITION SOFTS\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\ALKOHOLU\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\ALKOHOLU\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\amd64\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\amd64\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\i386\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\b03230418097ce8b3b\i386\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ARA\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ARA\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CHS\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CHS\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CHT\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CHT\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CZE\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\CZE\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\DAN\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\DAN\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\DEU\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\DEU\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ENG\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ENG\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ESN\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ESN\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\FIN\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\FIN\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\FRA\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\FRA\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\GRE\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\GRE\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ITA\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\ITA\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\JPN\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\JPN\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\KOR\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\KOR\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\NLD\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\NLD\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\NOR\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\NOR\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\POL\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\POL\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\POR\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\POR\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\RUS\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\RUS\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\SLO\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\SLO\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\SWE\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\SWE\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\TUR\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Documentation\TUR\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Anwendungen\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Anwendungen\My name is Yuyun.rtf
[2004.01.17 16:41:56 | 000,026,598 | ---- | M] () -- F:\Festplatte\Anwendungen\Teamspeak\manual\RC2servermanual-css.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Dokumentationen\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Dokumentationen\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Filme\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Filme\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Installationsdateien\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Installationsdateien\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Musik\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Musik\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Serien\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Festplatte\Serien\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\My name is Yuyun.rtf
[2001.01.01 00:05:36 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Baca AQ.rtf
[2001.01.01 00:05:36 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\My name is Yuyun.rtf
[1 F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\*.tmp files -> F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\*.tmp -> ]
[2001.01.01 00:05:36 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Baca AQ.rtf
[2001.01.01 00:05:36 | 000,001,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD Sync Data\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD Sync Data\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD Sync Data\Lucas\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD Sync Data\Lucas\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\EULA\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\EULA\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Google\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WD_Windows_Tools\Google\My name is Yuyun.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WDsync\Baca AQ.rtf
[2010.03.31 18:36:44 | 000,001,433 | ---- | M] () -- F:\WDsync\My name is Yuyun.rtf

< F:\*.lnk /s >
[2010.04.01 08:46:08 | 000,000,447 | ---- | M] () -- F:\WD_Windows_Tools
[2010.04.01 08:46:08 | 000,000,427 | ---- | M] () -- F:\WDsync
[2010.04.01 08:46:08 | 000,000,439 | ---- | M] () -- F:\WD Sync Data
[2010.04.01 08:46:08 | 000,000,465 | ---- | M] () -- F:\System Volume Information
[1 F:\*.tmp files -> F:\*.tmp -> ]
[2010.04.01 08:47:26 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\Microsoft.lnk
[2010.04.01 08:47:26 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\New Harry Potter and....lnk
[2010.04.01 08:47:26 | 000,000,421 | ---- | M] () -- F:\.Trash-500\files\M.I.lnk
[2010.04.01 08:46:08 | 000,000,441 | ---- | M] () -- F:\.Trash-500\files\Documentation.lnk
[2010.04.01 08:46:08 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\New Harry Potter and.2....lnk
[2010.04.01 08:47:16 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\New Harry Potter and....lnk
[2010.04.01 08:47:38 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\New Harry Potter and....lnk
[2010.04.01 08:47:38 | 000,000,439 | ---- | M] () -- F:\.Trash-500\files\c.traff\Action Plans
[2010.04.01 08:47:38 | 000,000,519 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning
[2010.04.01 08:47:38 | 000,000,469 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning
[2010.04.01 08:47:38 | 000,000,463 | ---- | M] () -- F:\.Trash-500\files\c.traff\intro for new volunteers
[2010.04.01 08:47:38 | 000,000,457 | ---- | M] () -- F:\.Trash-500\files\c.traff\Minutes from Meetings
[2010.04.01 08:47:38 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Microsoft.lnk
[2010.04.01 08:47:38 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Action Plans\New Harry Potter and....lnk
[2010.04.01 08:47:38 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Action Plans\Microsoft.lnk
[2010.04.01 08:47:40 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\New Harry Potter and....lnk
[2010.04.01 08:47:40 | 000,000,507 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Stakeholders' Forum 23.02.10 - pre-forum admin
[2010.04.01 08:47:40 | 000,000,479 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Research for stakeholders' forum
[2010.04.01 08:47:40 | 000,000,449 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Notes on 16.02.10
[2010.04.01 08:47:40 | 000,000,457 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Follow up on 23.02.10
[2010.04.01 08:47:40 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Microsoft.lnk
[2010.04.01 08:47:40 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\New Harry Potter and....lnk
[2010.04.01 08:47:42 | 000,000,487 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Research for education presentations
[2010.04.01 08:47:42 | 000,000,451 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\invitation letters
[2010.04.01 08:47:42 | 000,000,471 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Eduational Workshop 16.02.10
[2010.04.01 08:47:40 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Microsoft.lnk
[2010.04.01 08:47:42 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\intro for new volunteers\New Harry Potter and....lnk
[2010.04.01 08:47:42 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\intro for new volunteers\Microsoft.lnk
[2010.04.01 08:47:42 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Minutes from Meetings\New Harry Potter and....lnk
[2010.04.01 08:47:42 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Minutes from Meetings\Microsoft.lnk
[2010.04.01 08:47:44 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Resources\New Harry Potter and....lnk
[2010.04.01 08:47:44 | 000,000,457 | ---- | M] () -- F:\.Trash-500\files\c.traff\Resources\combating trafficking
[2010.04.01 08:47:44 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Resources\Microsoft.lnk
[2010.04.01 08:47:44 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Schools' Programme\New Harry Potter and....lnk
[2010.04.01 08:47:46 | 000,000,451 | ---- | M] () -- F:\.Trash-500\files\c.traff\Schools' Programme\teaching resources
[2010.04.01 08:47:44 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Schools' Programme\Microsoft.lnk
[2010.04.01 08:47:46 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\New Harry Potter and....lnk
[2010.04.01 08:47:46 | 000,000,473 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\SB Questionnaire cover sheets
[2010.04.01 08:47:46 | 000,000,443 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Questionnaires
[2010.04.01 08:47:46 | 000,000,459 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Questionnaire Analysis
[2010.04.01 08:47:46 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Microsoft.lnk
[2010.04.01 08:47:46 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Winneba project\New Harry Potter and....lnk
[2010.04.01 08:47:46 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Winneba project\Microsoft.lnk
[2010.04.01 08:47:48 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\c.traff\Yeji materials\New Harry Potter and....lnk
[2010.04.01 08:47:48 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\c.traff\Yeji materials\Microsoft.lnk
[2010.04.01 08:47:32 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\curice\New Harry Potter and....lnk
[2010.04.01 08:47:32 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\curice\Microsoft.lnk
[2010.04.01 08:47:24 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\SVETEJEBLO\New Harry Potter and....lnk
[2010.04.01 08:47:24 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\SVETEJEBLO\Microsoft.lnk
[2010.04.01 08:47:24 | 000,000,461 | ---- | M] () -- F:\.Trash-500\files\TUGOMOJAAA\New Harry Potter and....lnk
[2010.04.01 08:47:24 | 000,000,433 | ---- | M] () -- F:\.Trash-500\files\TUGOMOJAAA\Microsoft.lnk
[2010.04.01 08:47:26 | 000,000,439 | ---- | M] () -- F:\9ja\kelli hansom
[2010.04.01 08:47:26 | 000,000,445 | ---- | M] () -- F:\9ja\iyanya's single
[2010.04.01 08:47:26 | 000,000,427 | ---- | M] () -- F:\9ja\Idibia
[2010.04.01 08:47:26 | 000,000,429 | ---- | M] () -- F:\9ja\bigiano
[2010.04.01 08:47:30 | 000,000,461 | ---- | M] () -- F:\9ja\annette cookey\New Harry Potter and....lnk
[2010.04.01 08:47:30 | 000,000,433 | ---- | M] () -- F:\9ja\annette cookey\Microsoft.lnk
[2010.04.01 08:47:30 | 000,000,461 | ---- | M] () -- F:\9ja\bigiano\New Harry Potter and....lnk
[2010.04.01 08:47:30 | 000,000,433 | ---- | M] () -- F:\9ja\bigiano\Microsoft.lnk
[2010.04.01 08:47:30 | 000,000,461 | ---- | M] () -- F:\9ja\Idibia\New Harry Potter and....lnk
[2010.04.01 08:47:30 | 000,000,433 | ---- | M] () -- F:\9ja\Idibia\Microsoft.lnk
[2010.04.01 08:47:28 | 000,000,461 | ---- | M] () -- F:\9ja\iyanya's single\New Harry Potter and....lnk
[2010.04.01 08:47:28 | 000,000,433 | ---- | M] () -- F:\9ja\iyanya's single\Microsoft.lnk
[2010.04.01 08:47:28 | 000,000,461 | ---- | M] () -- F:\9ja\kelli hansom\New Harry Potter and....lnk
[2010.04.01 08:47:28 | 000,000,433 | ---- | M] () -- F:\9ja\kelli hansom\Microsoft.lnk
[2010.04.01 08:47:26 | 000,000,461 | ---- | M] () -- F:\9ja\M.I\New Harry Potter and....lnk
[2010.04.01 08:47:28 | 000,000,441 | ---- | M] () -- F:\9ja\M.I\TALK ABOUT IT
[2010.04.01 08:47:26 | 000,000,433 | ---- | M] () -- F:\9ja\M.I\Microsoft.lnk
[2010.04.01 08:47:34 | 000,000,461 | ---- | M] () -- F:\ADOBE AUDITION SOFTS\New Harry Potter and....lnk
[2010.04.01 08:47:34 | 000,000,433 | ---- | M] () -- F:\ADOBE AUDITION SOFTS\Microsoft.lnk
[2010.04.01 08:47:32 | 000,000,461 | ---- | M] () -- F:\ALKOHOLU\New Harry Potter and....lnk
[2010.04.01 08:47:32 | 000,000,433 | ---- | M] () -- F:\ALKOHOLU\Microsoft.lnk
[2010.04.01 08:47:20 | 000,000,461 | ---- | M] () -- F:\b03230418097ce8b3b\New Harry Potter and....lnk
[2010.04.01 08:47:20 | 000,000,425 | ---- | M] () -- F:\b03230418097ce8b3b\amd64
[2010.04.01 08:47:22 | 000,000,423 | ---- | M] () -- F:\b03230418097ce8b3b\i386
[2010.04.01 08:47:22 | 000,000,461 | ---- | M] () -- F:\b03230418097ce8b3b\amd64\New Harry Potter and....lnk
[2010.04.01 08:47:22 | 000,000,461 | ---- | M] () -- F:\b03230418097ce8b3b\i386\New Harry Potter and....lnk
[2010.04.01 08:46:18 | 000,000,461 | ---- | M] () -- F:\Documentation\New Harry Potter and....lnk
[2010.04.01 08:46:18 | 000,000,421 | ---- | M] () -- F:\Documentation\TUR
[2010.04.01 08:46:18 | 000,000,421 | ---- | M] () -- F:\Documentation\SWE
[2010.04.01 08:46:18 | 000,000,421 | ---- | M] () -- F:\Documentation\SLO
[2010.04.01 08:46:18 | 000,000,421 | ---- | M] () -- F:\Documentation\RUS
[2010.04.01 08:46:18 | 000,000,421 | ---- | M] () -- F:\Documentation\POR
[2010.04.01 08:46:38 | 000,000,461 | ---- | M] () -- F:\Documentation\ARA\New Harry Potter and....lnk
[2010.04.01 08:46:36 | 000,000,461 | ---- | M] () -- F:\Documentation\CHS\New Harry Potter and....lnk
[2010.04.01 08:46:36 | 000,000,461 | ---- | M] () -- F:\Documentation\CHT\New Harry Potter and....lnk
[2010.04.01 08:46:34 | 000,000,461 | ---- | M] () -- F:\Documentation\CZE\New Harry Potter and....lnk
[2010.04.01 08:46:34 | 000,000,461 | ---- | M] () -- F:\Documentation\DAN\New Harry Potter and....lnk
[2010.04.01 08:46:34 | 000,000,461 | ---- | M] () -- F:\Documentation\DEU\New Harry Potter and....lnk
[2010.04.01 08:46:32 | 000,000,461 | ---- | M] () -- F:\Documentation\ENG\New Harry Potter and....lnk
[2010.04.01 08:46:32 | 000,000,461 | ---- | M] () -- F:\Documentation\ESN\New Harry Potter and....lnk
[2010.04.01 08:46:30 | 000,000,461 | ---- | M] () -- F:\Documentation\FIN\New Harry Potter and....lnk
[2010.04.01 08:46:30 | 000,000,461 | ---- | M] () -- F:\Documentation\FRA\New Harry Potter and....lnk
[2010.04.01 08:46:28 | 000,000,461 | ---- | M] () -- F:\Documentation\GRE\New Harry Potter and....lnk
[2010.04.01 08:46:28 | 000,000,461 | ---- | M] () -- F:\Documentation\ITA\New Harry Potter and....lnk
[2010.04.01 08:46:28 | 000,000,461 | ---- | M] () -- F:\Documentation\JPN\New Harry Potter and....lnk
[2010.04.01 08:46:26 | 000,000,461 | ---- | M] () -- F:\Documentation\KOR\New Harry Potter and....lnk
[2010.04.01 08:46:26 | 000,000,461 | ---- | M] () -- F:\Documentation\NLD\New Harry Potter and....lnk
[2010.04.01 08:46:24 | 000,000,461 | ---- | M] () -- F:\Documentation\NOR\New Harry Potter and....lnk
[2010.04.01 08:46:24 | 000,000,461 | ---- | M] () -- F:\Documentation\POL\New Harry Potter and....lnk
[2010.04.01 08:46:22 | 000,000,461 | ---- | M] () -- F:\Documentation\POR\New Harry Potter and....lnk
[2010.04.01 08:46:22 | 000,000,461 | ---- | M] () -- F:\Documentation\RUS\New Harry Potter and....lnk
[2010.04.01 08:46:20 | 000,000,461 | ---- | M] () -- F:\Documentation\SLO\New Harry Potter and....lnk
[2010.04.01 08:46:20 | 000,000,461 | ---- | M] () -- F:\Documentation\SWE\New Harry Potter and....lnk
[2010.04.01 08:46:18 | 000,000,461 | ---- | M] () -- F:\Documentation\TUR\New Harry Potter and....lnk
[2010.04.01 08:47:02 | 000,000,461 | ---- | M] () -- F:\Festplatte\New Harry Potter and....lnk
[2010.04.01 08:47:02 | 000,000,425 | ---- | M] () -- F:\Festplatte\Filme
[2010.04.01 08:47:02 | 000,000,437 | ---- | M] () -- F:\Festplatte\Anwendungen
[2010.04.01 08:47:02 | 000,000,455 | ---- | M] () -- F:\Festplatte\Installationsdateien
[2010.04.01 08:47:02 | 000,000,425 | ---- | M] () -- F:\Festplatte\Musik
[2010.04.01 08:47:04 | 000,000,427 | ---- | M] () -- F:\Festplatte\Serien
[2010.04.01 08:47:06 | 000,000,461 | ---- | M] () -- F:\Festplatte\Anwendungen\New Harry Potter and....lnk
[2010.04.01 08:47:06 | 000,000,433 | ---- | M] () -- F:\Festplatte\Anwendungen\Teamspeak
[2010.04.01 08:47:06 | 000,000,433 | ---- | M] () -- F:\Festplatte\Anwendungen\CS Source
[2010.04.01 08:47:06 | 000,000,449 | ---- | M] () -- F:\Festplatte\Anwendungen\Heroes of Newerth
[2010.04.01 08:47:06 | 000,000,451 | ---- | M] () -- F:\Festplatte\Anwendungen\YouTUbe Downloader
[2007.05.05 14:41:54 | 000,001,591 | ---- | M] () -- F:\Festplatte\Anwendungen\CS Source\UT2003 spielen.lnk
[2010.02.12 12:16:16 | 000,000,816 | ---- | M] () -- F:\Festplatte\Anwendungen\CS Source\Counter Strike Source\example Shortcut.lnk
[2010.04.01 08:47:12 | 000,000,461 | ---- | M] () -- F:\Festplatte\Dokumentationen\New Harry Potter and....lnk
[2010.04.01 08:47:12 | 000,000,433 | ---- | M] () -- F:\Festplatte\Dokumentationen\The Union
[2010.04.01 08:47:12 | 000,000,443 | ---- | M] () -- F:\Festplatte\Dokumentationen\Secret Society
[2010.04.01 08:47:14 | 000,000,435 | ---- | M] () -- F:\Festplatte\Dokumentationen\Soul Power
[2010.04.01 08:47:04 | 000,000,461 | ---- | M] () -- F:\Festplatte\Filme\New Harry Potter and....lnk
[2010.04.01 08:47:04 | 000,000,499 | ---- | M] () -- F:\Festplatte\Filme\Todo sobre mi Madre (1999) Pedro Almodóvar
[2010.04.01 08:47:04 | 000,000,455 | ---- | M] () -- F:\Festplatte\Filme\Into The Wild (2008)
[2010.04.01 08:47:04 | 000,000,463 | ---- | M] () -- F:\Festplatte\Filme\Vertigo (1958) Hitchcock
[2010.04.01 08:47:04 | 000,000,475 | ---- | M] () -- F:\Festplatte\Filme\Psycho (1960) Alfred Hitchcock
[2010.04.01 08:47:06 | 000,000,449 | ---- | M] () -- F:\Festplatte\Filme\The Reader (2008)
[2010.04.01 08:47:08 | 000,000,461 | ---- | M] () -- F:\Festplatte\Installationsdateien\New Harry Potter and....lnk
[2010.04.01 08:47:08 | 000,000,433 | ---- | M] () -- F:\Festplatte\Installationsdateien\Traktor 3
[2010.04.01 08:47:08 | 000,000,443 | ---- | M] () -- F:\Festplatte\Installationsdateien\Ableton Live 7
[2010.04.01 08:47:08 | 000,000,449 | ---- | M] () -- F:\Festplatte\Installationsdateien\Traktor Pro 1.0.1
[2010.04.01 08:47:08 | 000,000,443 | ---- | M] () -- F:\Festplatte\Installationsdateien\Mixed In Key 4
[2010.04.01 08:47:08 | 000,000,439 | ---- | M] () -- F:\Festplatte\Installationsdateien\AntiVir Free.lnk
[2010.04.01 08:47:08 | 000,000,461 | ---- | M] () -- F:\Festplatte\Musik\New Harry Potter and....lnk
[2010.04.01 08:47:10 | 000,000,427 | ---- | M] () -- F:\Festplatte\Musik\Techno
[2010.04.01 08:47:10 | 000,000,433 | ---- | M] () -- F:\Festplatte\Musik\Aufnahmen
[2010.04.01 08:47:10 | 000,000,439 | ---- | M] () -- F:\Festplatte\Musik\Instrumental
[2010.04.01 08:47:10 | 000,000,439 | ---- | M] () -- F:\Festplatte\Musik\Elektronisch
[2010.04.01 08:47:10 | 000,000,451 | ---- | M] () -- F:\Festplatte\Musik\Instrumental [neu]
[2010.04.01 08:47:10 | 000,000,461 | ---- | M] () -- F:\Festplatte\Serien\New Harry Potter and....lnk
[2010.04.01 08:47:12 | 000,000,481 | ---- | M] () -- F:\Festplatte\Serien\It's Always Sunny In Philadelphia
[2010.04.01 08:47:12 | 000,000,461 | ---- | M] () -- F:\Festplatte\Serien\Flight Of The Conchords
[2010.04.01 08:47:12 | 000,000,465 | ---- | M] () -- F:\Festplatte\Serien\The Life and Times of Tim
[2010.04.01 08:47:12 | 000,000,435 | ---- | M] () -- F:\Festplatte\Serien\Neverwhere
[2010.04.01 08:47:12 | 000,000,435 | ---- | M] () -- F:\Festplatte\Serien\Screenwipe
[2010.04.01 08:46:40 | 000,000,461 | ---- | M] () -- F:\System Volume Information\New Harry Potter and....lnk
[2010.04.01 08:46:40 | 000,000,507 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}
[2010.04.01 08:46:42 | 000,000,507 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}
[2010.04.01 08:46:42 | 000,000,507 | ---- | M] () -- F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}
[2010.04.01 08:46:42 | 000,000,507 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}
[2010.04.01 08:46:44 | 000,000,507 | ---- | M] () -- F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}
[2010.04.01 08:46:56 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\New Harry Potter and....lnk
[2010.04.01 08:46:56 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\RP20
[2010.04.01 08:46:58 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\New Harry Potter and....lnk
[2010.04.01 08:46:58 | 000,000,421 | ---- | M] () -- F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\RP6
[2010.04.01 08:46:54 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\New Harry Potter and....lnk
[2010.04.01 08:46:54 | 000,000,421 | ---- | M] () -- F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\RP1
[2010.04.01 08:46:48 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\New Harry Potter and....lnk
[2010.04.01 08:46:48 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP698.lnk
[2010.04.01 08:46:48 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP699.lnk
[2010.04.01 08:46:48 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP700.lnk
[2010.04.01 08:46:48 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP701.lnk
[2010.04.01 08:46:50 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP702.lnk
[2010.04.01 08:47:34 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161170.lnk
[2010.04.01 08:47:34 | 000,000,505 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161171.lnk
[2010.04.01 08:47:34 | 000,000,433 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161172.lnk
[2010.04.01 08:47:34 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161173.lnk
[2010.04.01 08:47:34 | 000,000,433 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161174.lnk
[2010.04.01 08:47:14 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161175.lnk
[2010.04.01 08:47:18 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161177.lnk
[2010.04.01 08:47:18 | 000,000,431 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161178.lnk
[2010.04.01 08:47:18 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161179.lnk
[2010.04.01 08:46:52 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\New Harry Potter and....lnk
[2010.04.01 08:46:52 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\RP18
[2010.04.01 08:46:50 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\New Harry Potter and....lnk
[2010.04.01 08:46:50 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\RP35
[2010.04.01 08:46:50 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\RP38
[2010.04.01 08:46:52 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\RP39
[2010.04.01 08:46:52 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\RP48
[2010.04.01 08:46:52 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\RP49
[2010.04.01 08:46:52 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\New Harry Potter and....lnk
[2010.04.01 08:46:54 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP45
[2010.04.01 08:46:54 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP48
[2010.04.01 08:46:54 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP53
[2010.04.01 08:46:54 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP56
[2008.03.12 18:37:02 | 000,000,837 | ---- | M] () -- F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP53\A0057364.lnk
[2010.04.01 08:46:56 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\New Harry Potter and....lnk
[2010.04.01 08:46:56 | 000,000,425 | ---- | M] () -- F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\RP139
[2010.04.01 08:46:58 | 000,000,461 | ---- | M] () -- F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\New Harry Potter and....lnk
[2010.04.01 08:46:58 | 000,000,423 | ---- | M] () -- F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\RP48
[2010.04.01 08:47:36 | 000,000,461 | ---- | M] () -- F:\Usb 2.0 Driver\New Harry Potter and....lnk
[2010.04.01 08:47:36 | 000,000,509 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320
[2010.04.01 08:47:36 | 000,000,433 | ---- | M] () -- F:\Usb 2.0 Driver\Microsoft.lnk
[2010.04.01 08:47:36 | 000,000,461 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\New Harry Potter and....lnk
[2010.04.01 08:47:38 | 000,000,421 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc
[2010.04.01 08:47:38 | 000,000,423 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr
[2010.04.01 08:47:36 | 000,000,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\Microsoft.lnk
[2009.12.21 00:15:38 | 000,000,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Microsoft.lnk
[2010.01.29 17:34:10 | 000,000,435 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\New Folder.lnk
[2010.02.01 14:21:40 | 000,000,461 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\New Harry Potter and....lnk
[1 F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\*.tmp files -> F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\*.tmp -> ]
[2009.12.21 00:15:38 | 000,000,433 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Microsoft.lnk
[2010.01.29 17:34:12 | 000,000,435 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\New Folder.lnk
[2010.02.01 14:21:50 | 000,000,461 | ---- | M] () -- F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\New Harry Potter and....lnk
[2010.04.01 08:47:00 | 000,000,461 | ---- | M] () -- F:\WD Sync Data\New Harry Potter and....lnk
[2010.04.01 08:47:00 | 000,000,425 | ---- | M] () -- F:\WD Sync Data\Lucas
[2010.04.01 08:47:00 | 000,000,461 | ---- | M] () -- F:\WD Sync Data\Lucas\New Harry Potter and....lnk
[2010.04.01 08:47:02 | 000,000,423 | ---- | M] () -- F:\WD Sync Data\Lucas\Data
[2010.04.01 08:47:02 | 000,000,423 | ---- | M] () -- F:\WD Sync Data\Lucas\Temp
[2010.04.01 08:46:08 | 000,000,461 | ---- | M] () -- F:\WD_Windows_Tools\New Harry Potter and....lnk
[2010.04.01 08:46:10 | 000,000,427 | ---- | M] () -- F:\WD_Windows_Tools\Google
[2010.04.01 08:46:10 | 000,000,423 | ---- | M] () -- F:\WD_Windows_Tools\EULA
[2010.04.01 08:46:10 | 000,000,441 | ---- | M] () -- F:\WD_Windows_Tools\Documentation
[2010.04.01 08:46:10 | 000,000,425 | ---- | M] () -- F:\WD_Windows_Tools\Adobe
[2010.04.01 08:46:14 | 000,000,461 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\New Harry Potter and....lnk
[2010.04.01 08:46:16 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\KOR
[2010.04.01 08:46:16 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\JPN
[2010.04.01 08:46:16 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\ITA
[2010.04.01 08:46:16 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\FRA
[2010.04.01 08:46:16 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Adobe\ESN
[2010.04.01 08:46:14 | 000,000,461 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\New Harry Potter and....lnk
[2010.04.01 08:46:14 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\KOR
[2010.04.01 08:46:14 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\JPN
[2010.04.01 08:46:14 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\ITA
[2010.04.01 08:46:14 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\FRA
[2010.04.01 08:46:14 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\Documentation\ESN
[2010.04.01 08:46:12 | 000,000,461 | ---- | M] () -- F:\WD_Windows_Tools\EULA\New Harry Potter and....lnk
[2010.04.01 08:46:12 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\EULA\KOR
[2010.04.01 08:46:12 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\EULA\JPN
[2010.04.01 08:46:12 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\EULA\ITA
[2010.04.01 08:46:12 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\EULA\FRA
[2010.04.01 08:46:12 | 000,000,421 | ---- | M] () -- F:\WD_Windows_Tools\EULA\ESN
[2010.04.01 08:46:10 | 000,000,461 | ---- | M] () -- F:\WD_Windows_Tools\Google\New Harry Potter and....lnk
[2010.04.01 08:46:10 | 000,000,429 | ---- | M] () -- F:\WD_Windows_Tools\Google\Toolbar
[2010.04.01 08:46:10 | 000,000,427 | ---- | M] () -- F:\WD_Windows_Tools\Google\Picasa
[2010.04.01 08:46:10 | 000,000,429 | ---- | M] () -- F:\WD_Windows_Tools\Google\Desktop
[2010.04.01 08:46:16 | 000,000,461 | ---- | M] () -- F:\WDsync\New Harry Potter and....lnk

< F:\*.ink /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 131 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:05EE1EEF
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
< End of report >

Edited by ldeecke, 19 April 2010 - 12:46 PM.

  • 0

#10
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
Which of the following files you want to open:

F:\.Trash-500\files\Microsoft.lnk
F:\.Trash-500\files\New Harry Potter and....lnk
F:\.Trash-500\files\M.I.lnk
F:\.Trash-500\files\Documentation.lnk
F:\.Trash-500\files\New Harry Potter and.2....lnk
F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Microsoft.lnk
F:\.Trash-500\files\c.traff\Action Plans\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Action Plans\Microsoft.lnk
F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Microsoft.lnk
F:\.Trash-500\files\c.traff\Eduacational Forum Planning\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Microsoft.lnk
F:\.Trash-500\files\c.traff\intro for new volunteers\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\intro for new volunteers\Microsoft.lnk
F:\.Trash-500\files\c.traff\Minutes from Meetings\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Minutes from Meetings\Microsoft.lnk
F:\.Trash-500\files\c.traff\Resources\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Resources\Microsoft.lnk
F:\.Trash-500\files\c.traff\Schools' Programme\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Schools' Programme\Microsoft.lnk
F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Microsoft.lnk
F:\.Trash-500\files\c.traff\Winneba project\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Winneba project\Microsoft.lnk
F:\.Trash-500\files\c.traff\Yeji materials\New Harry Potter and....lnk
F:\.Trash-500\files\c.traff\Yeji materials\Microsoft.lnk
F:\.Trash-500\files\curice\New Harry Potter and....lnk
F:\.Trash-500\files\curice\Microsoft.lnk
F:\.Trash-500\files\SVETEJEBLO\New Harry Potter and....lnk
F:\.Trash-500\files\SVETEJEBLO\Microsoft.lnk
F:\.Trash-500\files\TUGOMOJAAA\New Harry Potter and....lnk
F:\.Trash-500\files\TUGOMOJAAA\Microsoft.lnk
F:\9ja\annette cookey\New Harry Potter and....lnk
F:\9ja\annette cookey\Microsoft.lnk
F:\9ja\bigiano\New Harry Potter and....lnk
F:\9ja\bigiano\Microsoft.lnk
F:\9ja\Idibia\New Harry Potter and....lnk
F:\9ja\Idibia\Microsoft.lnk
F:\9ja\iyanya's single\New Harry Potter and....lnk
F:\9ja\iyanya's single\Microsoft.lnk
F:\9ja\kelli hansom\New Harry Potter and....lnk
F:\9ja\kelli hansom\Microsoft.lnk
F:\9ja\M.I\New Harry Potter and....lnk
F:\9ja\M.I\Microsoft.lnk
F:\ADOBE AUDITION SOFTS\New Harry Potter and....lnk
F:\ADOBE AUDITION SOFTS\Microsoft.lnk
F:\ALKOHOLU\New Harry Potter and....lnk
F:\ALKOHOLU\Microsoft.lnk
F:\b03230418097ce8b3b\New Harry Potter and....lnk
F:\b03230418097ce8b3b\amd64\New Harry Potter and....lnk
F:\b03230418097ce8b3b\i386\New Harry Potter and....lnk
F:\Documentation\New Harry Potter and....lnk
F:\Documentation\ARA\New Harry Potter and....lnk
F:\Documentation\CHS\New Harry Potter and....lnk
F:\Documentation\CHT\New Harry Potter and....lnk
F:\Documentation\CZE\New Harry Potter and....lnk
F:\Documentation\DAN\New Harry Potter and....lnk
F:\Documentation\DEU\New Harry Potter and....lnk
F:\Documentation\ENG\New Harry Potter and....lnk
F:\Documentation\ESN\New Harry Potter and....lnk
F:\Documentation\FIN\New Harry Potter and....lnk
F:\Documentation\FRA\New Harry Potter and....lnk
F:\Documentation\GRE\New Harry Potter and....lnk
F:\Documentation\ITA\New Harry Potter and....lnk
F:\Documentation\JPN\New Harry Potter and....lnk
F:\Documentation\KOR\New Harry Potter and....lnk
F:\Documentation\NLD\New Harry Potter and....lnk
F:\Documentation\NOR\New Harry Potter and....lnk
F:\Documentation\POL\New Harry Potter and....lnk
F:\Documentation\POR\New Harry Potter and....lnk
F:\Documentation\RUS\New Harry Potter and....lnk
F:\Documentation\SLO\New Harry Potter and....lnk
F:\Documentation\SWE\New Harry Potter and....lnk
F:\Documentation\TUR\New Harry Potter and....lnk
F:\Festplatte\New Harry Potter and....lnk
F:\Festplatte\Anwendungen\New Harry Potter and....lnk
F:\Festplatte\Anwendungen\CS Source\UT2003 spielen.lnk
F:\Festplatte\Anwendungen\CS Source\Counter Strike Source\example Shortcut.lnk
F:\Festplatte\Dokumentationen\New Harry Potter and....lnk
F:\Festplatte\Filme\New Harry Potter and....lnk
F:\Festplatte\Installationsdateien\New Harry Potter and....lnk
F:\Festplatte\Installationsdateien\AntiVir Free.lnk
F:\Festplatte\Musik\New Harry Potter and....lnk
F:\Festplatte\Serien\New Harry Potter and....lnk
F:\System Volume Information\New Harry Potter and....lnk
F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\New Harry Potter and....lnk
F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\New Harry Potter and....lnk
F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\New Harry Potter and....lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\New Harry Potter and....lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP698.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP699.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP700.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP701.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP702.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161170.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161171.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161172.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161173.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161174.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161175.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161177.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161178.lnk
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\RP715\A0161179.lnk
F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\New Harry Potter and....lnk
F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\New Harry Potter and....lnk
F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\New Harry Potter and....lnk
F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\RP53\A0057364.lnk
F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\New Harry Potter and....lnk
F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\New Harry Potter and....lnk
F:\Usb 2.0 Driver\New Harry Potter and....lnk
F:\Usb 2.0 Driver\Microsoft.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\New Harry Potter and....lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\Microsoft.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Microsoft.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\New Folder.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\New Harry Potter and....lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Microsoft.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\New Folder.lnk
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\New Harry Potter and....lnk
F:\WD Sync Data\New Harry Potter and....lnk
F:\WD Sync Data\Lucas\New Harry Potter and....lnk
F:\WD_Windows_Tools\New Harry Potter and....lnk
F:\WD_Windows_Tools\Adobe\New Harry Potter and....lnk
F:\WD_Windows_Tools\Documentation\New Harry Potter and....lnk
F:\WD_Windows_Tools\EULA\New Harry Potter and....lnk
F:\WD_Windows_Tools\Google\New Harry Potter and....lnk
F:\WDsync\New Harry Potter and....lnk

=============================================

  • Copy the entire contents of the Quote Box below to Notepad.
  • Name the file as CFScript.txt
  • Change the Save as Type to All Files
  • and Save it on the desktop

File::
C:\DesinfectLogs\Baca AQ.rtf
C:\DesinfectLogs\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Baca AQ.rtf
C:\Dokumente und Einstellungen\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Default User\Baca AQ.rtf
C:\Dokumente und Einstellungen\Default User\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\LocalService\Baca AQ.rtf
C:\Dokumente und Einstellungen\LocalService\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Ableton\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Audible\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Downloads\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Downloads\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Filme\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Filme\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\licenses\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\licenses\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\readmes\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\readmes\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Updater\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Updater\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\Baca AQ.rtf
C:\Dokumente und Einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\My name is Yuyun.rtf
C:\Dokumente und Einstellungen\NetworkService\Baca AQ.rtf
C:\Dokumente und Einstellungen\NetworkService\My name is Yuyun.rtf
C:\Downloads\Baca AQ.rtf
C:\Downloads\My name is Yuyun.rtf
C:\DVDVideoSoft\Baca AQ.rtf
C:\DVDVideoSoft\My name is Yuyun.rtf
C:\DVDVideoSoft\Temp\Baca AQ.rtf
C:\DVDVideoSoft\Temp\My name is Yuyun.rtf
C:\Installationsdateien\Baca AQ.rtf
C:\Installationsdateien\My name is Yuyun.rtf
C:\Installationsdateien\Omegadriver\Baca AQ.rtf
C:\Installationsdateien\Omegadriver\My name is Yuyun.rtf
C:\Installationsdateien\Soundtreiber DigitalMAX2\Baca AQ.rtf
C:\Installationsdateien\Soundtreiber DigitalMAX2\My name is Yuyun.rtf
C:\Installationsdateien\WirelasscardDriver\Baca AQ.rtf
C:\Installationsdateien\WirelasscardDriver\My name is Yuyun.rtf
C:\Intel\Baca AQ.rtf
C:\Intel\My name is Yuyun.rtf
C:\Intel\Intel® PRO Wireless Network Connection ID Tool\Baca AQ.rtf
C:\Intel\Intel® PRO Wireless Network Connection ID Tool\My name is Yuyun.rtf
C:\Programme\Ableton\Baca AQ.rtf
C:\Programme\Ableton\My name is Yuyun.rtf
C:\Programme\Adobe\Baca AQ.rtf
C:\Programme\Adobe\My name is Yuyun.rtf
CC:\Programme\Adobe\Audition 1.0\Legal\USEnglish.rtf
C:\Programme\Alcohol\Baca AQ.rtf
C:\Programme\Alcohol\My name is Yuyun.rtf
C:\Programme\Analog Devices\Baca AQ.rtf
C:\Programme\Analog Devices\My name is Yuyun.rtf
C:\Programme\Apple Software Update\Baca AQ.rtf
C:\Programme\Apple Software Update\My name is Yuyun.rtf
C:\Programme\ATI Technologies\Baca AQ.rtf
C:\Programme\ATI Technologies\My name is Yuyun.rtf
C:\Programme\Audacity\Baca AQ.rtf
C:\Programme\Audacity\My name is Yuyun.rtf
C:\Programme\AVIcodec\Baca AQ.rtf
C:\Programme\AVIcodec\My name is Yuyun.rtf
C:\Programme\Avira\Baca AQ.rtf
C:\Programme\Avira\My name is Yuyun.rtf
C:\Programme\AVOne\Baca AQ.rtf
C:\Programme\AVOne\My name is Yuyun.rtf
C:\Programme\Bonjour\About Bonjour.rtf
C:\Programme\Bonjour\Baca AQ.rtf
C:\Programme\Bonjour\My name is Yuyun.rtf
C:\Programme\Broadcom\Baca AQ.rtf
C:\Programme\Broadcom\My name is Yuyun.rtf
C:\Programme\CCleaner\Baca AQ.rtf
C:\Programme\CCleaner\My name is Yuyun.rtf
C:\Programme\Cubase LE\Baca AQ.rtf
C:\Programme\Cubase LE\My name is Yuyun.rtf
C:\Programme\Cubase\Baca AQ.rtf
C:\Programme\Cubase\My name is Yuyun.rtf
C:\Programme\CyberLink\Baca AQ.rtf
C:\Programme\CyberLink\My name is Yuyun.rtf
C:\Programme\Daemontools Light\Baca AQ.rtf
C:\Programme\Daemontools Light\My name is Yuyun.rtf
C:\Programme\dBpoweramp\Baca AQ.rtf
C:\Programme\dBpoweramp\My name is Yuyun.rtf
C:\Programme\devolo\Baca AQ.rtf
C:\Programme\devolo\My name is Yuyun.rtf
C:\Programme\DivX\Baca AQ.rtf
C:\Programme\DivX\My name is Yuyun.rtf
C:\Programme\File Scanner Library (Spybot - Search & Destroy)\Baca AQ.rtf
C:\Programme\File Scanner Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
C:\Programme\FlashFXP\Baca AQ.rtf
C:\Programme\FlashFXP\My name is Yuyun.rtf
C:\Programme\Fraps\Baca AQ.rtf
C:\Programme\Fraps\My name is Yuyun.rtf
C:\Programme\Free Audio Converter\Baca AQ.rtf
C:\Programme\Free Audio Converter\My name is Yuyun.rtf
C:\Programme\GameOS\Baca AQ.rtf
C:\Programme\GameOS\My name is Yuyun.rtf
C:\Programme\Google\Baca AQ.rtf
C:\Programme\Google\My name is Yuyun.rtf
C:\Programme\Hewlett-Packard\Baca AQ.rtf
C:\Programme\Hewlett-Packard\My name is Yuyun.rtf
C:\Programme\HP\Baca AQ.rtf
C:\Programme\HP\My name is Yuyun.rtf
C:\Programme\ICQ\Baca AQ.rtf
C:\Programme\ICQ\My name is Yuyun.rtf
C:\Programme\IEEE 802.11 WIRELESS LAN\Baca AQ.rtf
C:\Programme\IEEE 802.11 WIRELESS LAN\My name is Yuyun.rtf
C:\Programme\Illustrate\Baca AQ.rtf
C:\Programme\Illustrate\My name is Yuyun.rtf
C:\Programme\Image-Line\Baca AQ.rtf
C:\Programme\Image-Line\My name is Yuyun.rtf
C:\Programme\InstallShield Installation Information\Baca AQ.rtf
C:\Programme\InstallShield Installation Information\My name is Yuyun.rtf
C:\Programme\Intel\Baca AQ.rtf
C:\Programme\Intel\My name is Yuyun.rtf
C:\Programme\Internet Explorer\Baca AQ.rtf
C:\Programme\Internet Explorer\My name is Yuyun.rtf
C:\Programme\iPod\Acknowledgements.rtf
C:\Programme\iPod\Baca AQ.rtf
C:\Programme\iPod\My name is Yuyun.rtf
C:\Programme\IrfanView\Baca AQ.rtf
C:\Programme\IrfanView\My name is Yuyun.rtf
C:\Programme\iTunes\Acknowledgements.rtf
C:\Programme\iTunes\Baca AQ.rtf
C:\Programme\iTunes\My name is Yuyun.rtf
C:\Programme\Java\Baca AQ.rtf
C:\Programme\Java\My name is Yuyun.rtf
C:\Programme\K-Lite Codec Pack\Baca AQ.rtf
C:\Programme\K-Lite Codec Pack\My name is Yuyun.rtf
C:\Programme\K-Lite Codec Pack\Info\readme.rtf
C:\Programme\Lavasoft\Baca AQ.rtf
C:\Programme\Lavasoft\My name is Yuyun.rtf
C:\Programme\LimeWire\Baca AQ.rtf
C:\Programme\LimeWire\My name is Yuyun.rtf
C:\Programme\Logitech\Baca AQ.rtf
C:\Programme\Logitech\My name is Yuyun.rtf
C:\Programme\Macromedia\Baca AQ.rtf
C:\Programme\Macromedia\My name is Yuyun.rtf
C:\Programme\MagicISO\Baca AQ.rtf
C:\Programme\MagicISO\My name is Yuyun.rtf
C:\Programme\Malwarebytes' Anti-Malware\Baca AQ.rtf
C:\Programme\Malwarebytes' Anti-Malware\My name is Yuyun.rtf
C:\Programme\Medieval CUE Splitter\Baca AQ.rtf
C:\Programme\Medieval CUE Splitter\My name is Yuyun.rtf
C:\Programme\Messenger Plus!\Baca AQ.rtf
C:\Programme\Messenger Plus!\My name is Yuyun.rtf
C:\Programme\Messenger\Baca AQ.rtf
C:\Programme\Messenger\My name is Yuyun.rtf
C:\Programme\Microsoft CAPICOM 2.1.0.2\Baca AQ.rtf
C:\Programme\Microsoft CAPICOM 2.1.0.2\My name is Yuyun.rtf
C:\Programme\microsoft frontpage\Baca AQ.rtf
C:\Programme\microsoft frontpage\My name is Yuyun.rtf
C:\Programme\Microsoft SQL Server\Baca AQ.rtf
C:\Programme\Microsoft SQL Server\My name is Yuyun.rtf
C:\Programme\mIRC\Baca AQ.rtf
C:\Programme\mIRC\My name is Yuyun.rtf
C:\Programme\Misc. Support Library (Spybot - Search & Destroy)\Baca AQ.rtf
C:\Programme\Misc. Support Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
C:\Programme\Movie Maker\Baca AQ.rtf
C:\Programme\Movie Maker\My name is Yuyun.rtf
C:\Programme\Mozilla Firefox\Baca AQ.rtf
C:\Programme\Mozilla Firefox\My name is Yuyun.rtf
C:\Programme\Mozilla Sunbird\Baca AQ.rtf
C:\Programme\Mozilla Sunbird\My name is Yuyun.rtf
C:\Programme\Mozilla Thunderbird\Baca AQ.rtf
C:\Programme\Mozilla Thunderbird\My name is Yuyun.rtf
C:\Programme\MSN Gaming Zone\Baca AQ.rtf
C:\Programme\MSN Gaming Zone\My name is Yuyun.rtf
C:\Programme\MSXML 4.0\Baca AQ.rtf
C:\Programme\MSXML 4.0\My name is Yuyun.rtf
C:\Programme\MultiRes\Baca AQ.rtf
C:\Programme\MultiRes\My name is Yuyun.rtf
C:\Programme\Native Instruments\Baca AQ.rtf
C:\Programme\Native Instruments\My name is Yuyun.rtf
C:\Programme\NetMeeting\Baca AQ.rtf
C:\Programme\NetMeeting\My name is Yuyun.rtf
C:\Programme\OpenOffice.org 2.2\Baca AQ.rtf
C:\Programme\OpenOffice.org 2.2\My name is Yuyun.rtf
C:\Programme\OpenOffice.org 2.4\Baca AQ.rtf
C:\Programme\OpenOffice.org 2.4\My name is Yuyun.rtf
C:\Programme\OpenOffice.org 3\Baca AQ.rtf
C:\Programme\OpenOffice.org 3\My name is Yuyun.rtf
C:\Programme\Opera\Baca AQ.rtf
C:\Programme\Opera\My name is Yuyun.rtf
C:\Programme\Orbitdownloader\Baca AQ.rtf
C:\Programme\Orbitdownloader\My name is Yuyun.rtf
C:\Programme\Outlook Express\Baca AQ.rtf
C:\Programme\Outlook Express\My name is Yuyun.rtf
C:\Programme\Phoenix Technologies Ltd\Baca AQ.rtf
C:\Programme\Phoenix Technologies Ltd\My name is Yuyun.rtf
C:\Programme\PIC\Baca AQ.rtf
C:\Programme\PIC\My name is Yuyun.rtf
C:\Programme\QuickTime\Baca AQ.rtf
C:\Programme\QuickTime\My name is Yuyun.rtf
C:\Programme\Radeon Omega Driver\Baca AQ.rtf
C:\Programme\Radeon Omega Driver\My name is Yuyun.rtf
C:\Programme\Rapid Evolution\Baca AQ.rtf
C:\Programme\Rapid Evolution\My name is Yuyun.rtf
C:\Programme\RegCleaner\Baca AQ.rtf
C:\Programme\RegCleaner\My name is Yuyun.rtf
C:\Programme\Samsung\Baca AQ.rtf
C:\Programme\Samsung\My name is Yuyun.rtf
C:\Programme\SDHelper (Spybot - Search & Destroy)\Baca AQ.rtf
C:\Programme\SDHelper (Spybot - Search & Destroy)\My name is Yuyun.rtf
C:\Programme\Skype\Baca AQ.rtf
C:\Programme\Skype\My name is Yuyun.rtf
C:\Programme\Sony Vegas\Baca AQ.rtf
C:\Programme\Sony Vegas\My name is Yuyun.rtf
C:\Programme\Sony\Baca AQ.rtf
C:\Programme\Sony\My name is Yuyun.rtf
C:\Programme\Sound Forge\Baca AQ.rtf
C:\Programme\Sound Forge\My name is Yuyun.rtf
C:\Programme\Spybot - Search & Destroy\Baca AQ.rtf
C:\Programme\Spybot - Search & Destroy\My name is Yuyun.rtf
C:\Programme\SRS Labs\Baca AQ.rtf
C:\Programme\SRS Labs\My name is Yuyun.rtf
C:\Programme\Syncrosoft\Baca AQ.rtf
C:\Programme\Syncrosoft\My name is Yuyun.rtf
C:\Programme\Syncrosoft\LCC\Release Notes.rtf
C:\Programme\Teamspeak2\Baca AQ.rtf
C:\Programme\Teamspeak2\My name is Yuyun.rtf
C:\Programme\TeaTimer (Spybot - Search & Destroy)\Baca AQ.rtf
C:\Programme\TeaTimer (Spybot - Search & Destroy)\My name is Yuyun.rtf
C:\Programme\Tortun\Baca AQ.rtf
C:\Programme\Tortun\My name is Yuyun.rtf
C:\Programme\Uninstall Information\Baca AQ.rtf
C:\Programme\Uninstall Information\My name is Yuyun.rtf
C:\Programme\VideoLAN\Baca AQ.rtf
C:\Programme\VideoLAN\My name is Yuyun.rtf
C:\Programme\WaveLab\Baca AQ.rtf
C:\Programme\WaveLab\My name is Yuyun.rtf
C:\Programme\Western Digital\Baca AQ.rtf
C:\Programme\Western Digital\My name is Yuyun.rtf
C:\Programme\Winamp\Baca AQ.rtf
C:\Programme\Winamp\My name is Yuyun.rtf
C:\Programme\Windows Live\Baca AQ.rtf
C:\Programme\Windows Live\My name is Yuyun.rtf
C:\Programme\Windows Media Connect 2\Baca AQ.rtf
C:\Programme\Windows Media Connect 2\My name is Yuyun.rtf
C:\Programme\Windows Media Player\Baca AQ.rtf
C:\Programme\Windows Media Player\My name is Yuyun.rtf
C:\Programme\Windows NT\Baca AQ.rtf
C:\Programme\Windows NT\My name is Yuyun.rtf
C:\Programme\WindowsUpdate\Baca AQ.rtf
C:\Programme\WindowsUpdate\My name is Yuyun.rtf
C:\Programme\Winrar\Baca AQ.rtf
C:\Programme\Winrar\My name is Yuyun.rtf
C:\Programme\xerox\Baca AQ.rtf
C:\Programme\xerox\My name is Yuyun.rtf
C:\Programme\Xvid\Baca AQ.rtf
C:\Programme\Xvid\My name is Yuyun.rtf
C:\Programme\Yahoo!\Baca AQ.rtf
C:\Programme\Yahoo!\My name is Yuyun.rtf
C:\Programme\Youtube Converter\Baca AQ.rtf
C:\Programme\Youtube Converter\My name is Yuyun.rtf
C:\Programme\Zero G Registry\Baca AQ.rtf
C:\Programme\Zero G Registry\My name is Yuyun.rtf
C:\Temp\Baca AQ.rtf
C:\Temp\My name is Yuyun.rtf
C:\WINDOWS\Baca AQ.rtf
C:\WINDOWS\My name is Yuyun.rtf
C:\WINDOWS\$hf_mig$\Baca AQ.rtf
C:\WINDOWS\$hf_mig$\My name is Yuyun.rtf
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\Baca AQ.rtf
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\My name is Yuyun.rtf
C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\Baca AQ.rtf
C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\My name is Yuyun.rtf
C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\Baca AQ.rtf
C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB834707$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB834707$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB867282$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB867282$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB873339$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB873339$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB883523$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB883523$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB884575$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB884575$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB885250$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB885250$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB885835$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB885835$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB885836$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB885836$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB886185$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB886185$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB887472$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB887472$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB888113$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB888113$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB888302$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB888302$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB890046$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB890046$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB890175$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB890175$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB890859$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB890859$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB891781$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB891781$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB893756$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB893756$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB894391$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB894391$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB896358$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB896358$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB896423$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB896423$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB896424$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB896424$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB896428$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB896428$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB898461$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB898461$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB899587$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB899587$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB899591$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB899591$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB900485$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB900485$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB900725$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB900725$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB901017$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB901017$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB901214$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB901214$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB902400$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB902400$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB904706$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB904706$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB904942$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB904942$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB905414$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB905414$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB905749$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB905749$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB908519$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB908519$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB908531$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB908531$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB910437$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB910437$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB911280$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB911280$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB911562$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB911562$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB911564$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB911564$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB911567$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB911567$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB911927$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB911927$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB912919$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB912919$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB913580$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB913580$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB914388$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB914388$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB914389$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB914389$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB914440$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB914440$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB915865$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB915865$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB916595$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB916595$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB917344$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB917344$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB917422$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB917422$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB917734_WMP10$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB917734_WMP10$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB917953$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB917953$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB918118$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB918118$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB918439$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB918439$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB918899$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB918899$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB919007$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB919007$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920213$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920213$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920214$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920214$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920670$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920670$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920683$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920683$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920685$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920685$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB920872$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB920872$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB921398$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB921398$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB921503$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB921503$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB921883$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB921883$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB922582$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB922582$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB922616$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB922616$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB922760$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB922760$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB922819$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB922819$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923191$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923191$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923414$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923414$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923561$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923561$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923689$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923689$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923694$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923694$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB923980$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB923980$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB924191$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB924191$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB924270$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB924270$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB924496$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB924496$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB924667$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB924667$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB925398_WMP64$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB925398_WMP64$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB925454$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB925454$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB925486$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB925486$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB925902$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB925902$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB926239$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB926239$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB926255$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB926255$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB926436$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB926436$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB927779$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB927779$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB927802$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB927802$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB927891$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB927891$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB928090$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB928090$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB928255$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB928255$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB928843$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB928843$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB929123$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB929123$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB929338$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB929338$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB929399$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB929399$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB929969$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB929969$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB930178$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB930178$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB930916$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB930916$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB931261$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB931261$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB931768$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB931768$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB931784$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB931784$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB931836$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB931836$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB932168$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB932168$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB932823-v3$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB932823-v3$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB933360$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB933360$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB933566$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB933566$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB933729$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB933729$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB935839$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB935839$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB935840$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB935840$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB936021$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB936021$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB936357$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB936357$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB936782_WMP11$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB936782_WMP11$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB937143$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB937143$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB938127$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB938127$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB938464$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB938464$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB938828$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB938828$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB938829$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB938829$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB939653$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB939653$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB939683$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB939683$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB941202$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB941202$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB941568$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB941568$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB941569$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB941569$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB941644$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB941644$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB941693$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB941693$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB942615$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB942615$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB942763$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB942763$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB942840$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB942840$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB943055$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB943055$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB943460$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB943460$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB943485$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB943485$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB944533$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB944533$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB944653$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB944653$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB945553$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB945553$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB946026$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB946026$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB946627$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB946627$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB946648$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB946648$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB948590$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB948590$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB948881$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB948881$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB950749$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB950749$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB950760$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB950760$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB950762$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB950762$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB950974$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB950974$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951066$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951066$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951072-v2$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951072-v2$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951376$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951376$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951376-v2$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951376-v2$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951698$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951698$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB951748$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB951748$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB952004$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB952004$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB952069_WM9$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB952069_WM9$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB952287$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB952287$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB952954$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB952954$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB953839$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB953839$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB954154_WM11$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB954154_WM11$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB954211$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB954211$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB954600$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB954600$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB955069$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB955069$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB955839$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB955839$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB956391$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB956391$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB956572$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB956572$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB956802$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB956802$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB956803$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB956803$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB956841$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB956841$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB957095$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB957095$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB957097$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB957097$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB958644$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB958644$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB958687$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB958687$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB958690$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB958690$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB959426$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB959426$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB959772_WM11$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB959772_WM11$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB960225$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB960225$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB960715$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB960715$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB960803$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB960803$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB961373$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB961373$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB961501$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB961501$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB967715$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB967715$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB968537$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB968537$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB969898$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB969898$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallKB970238$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallKB970238$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallMSCompPackV1$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallMSCompPackV1$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallWdf01005$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallWdf01005$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallWMFDist11$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallWMFDist11$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallwmp11$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallwmp11$\My name is Yuyun.rtf
C:\WINDOWS\$NtUninstallWudf01000$\Baca AQ.rtf
C:\WINDOWS\$NtUninstallWudf01000$\My name is Yuyun.rtf
C:\WINDOWS\.jagex_cache_32\Baca AQ.rtf
C:\WINDOWS\.jagex_cache_32\My name is Yuyun.rtf
C:\WINDOWS\addins\Baca AQ.rtf
C:\WINDOWS\addins\My name is Yuyun.rtf
C:\WINDOWS\amana_asset\Baca AQ.rtf
C:\WINDOWS\amana_asset\My name is Yuyun.rtf
C:\WINDOWS\AppPatch\Baca AQ.rtf
C:\WINDOWS\AppPatch\My name is Yuyun.rtf
C:\WINDOWS\assembly\Baca AQ.rtf
C:\WINDOWS\assembly\My name is Yuyun.rtf
C:\WINDOWS\Config\Baca AQ.rtf
C:\WINDOWS\Config\My name is Yuyun.rtf
C:\WINDOWS\Connection Wizard\Baca AQ.rtf
C:\WINDOWS\Connection Wizard\My name is Yuyun.rtf
C:\WINDOWS\Cursors\Baca AQ.rtf
C:\WINDOWS\Cursors\My name is Yuyun.rtf
C:\WINDOWS\Debug\Baca AQ.rtf
C:\WINDOWS\Debug\My name is Yuyun.rtf
C:\WINDOWS\Docs\Baca AQ.rtf
C:\WINDOWS\Docs\My name is Yuyun.rtf
C:\WINDOWS\Downloaded Installations\Baca AQ.rtf
C:\WINDOWS\Downloaded Installations\My name is Yuyun.rtf
C:\WINDOWS\Downloaded Program Files\Baca AQ.rtf
C:\WINDOWS\Downloaded Program Files\My name is Yuyun.rtf
C:\WINDOWS\Driver Cache\Baca AQ.rtf
C:\WINDOWS\Driver Cache\My name is Yuyun.rtf
C:\WINDOWS\Fonts\Baca AQ.rtf
C:\WINDOWS\Fonts\My name is Yuyun.rtf
C:\WINDOWS\Help\Baca AQ.rtf
C:\WINDOWS\Help\My name is Yuyun.rtf
C:\WINDOWS\I386_old\Baca AQ.rtf
C:\WINDOWS\I386_old\My name is Yuyun.rtf
C:\WINDOWS\ie7updates\Baca AQ.rtf
C:\WINDOWS\ie7updates\My name is Yuyun.rtf
C:\WINDOWS\ime\Baca AQ.rtf
C:\WINDOWS\ime\My name is Yuyun.rtf
C:\WINDOWS\inf\Baca AQ.rtf
C:\WINDOWS\inf\My name is Yuyun.rtf
C:\WINDOWS\Installer\Baca AQ.rtf
C:\WINDOWS\Installer\My name is Yuyun.rtf
C:\WINDOWS\java\Baca AQ.rtf
C:\WINDOWS\java\My name is Yuyun.rtf
C:\WINDOWS\Logs\Baca AQ.rtf
C:\WINDOWS\Logs\My name is Yuyun.rtf
C:\WINDOWS\Media\Baca AQ.rtf
C:\WINDOWS\Media\My name is Yuyun.rtf
C:\WINDOWS\Microsoft.NET\Baca AQ.rtf
C:\WINDOWS\Microsoft.NET\My name is Yuyun.rtf
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\EULA.rtf
C:\WINDOWS\Minidump\Baca AQ.rtf
C:\WINDOWS\Minidump\My name is Yuyun.rtf
C:\WINDOWS\msagent\Baca AQ.rtf
C:\WINDOWS\msagent\My name is Yuyun.rtf
C:\WINDOWS\msapps\Baca AQ.rtf
C:\WINDOWS\msapps\My name is Yuyun.rtf
C:\WINDOWS\mui\Baca AQ.rtf
C:\WINDOWS\mui\My name is Yuyun.rtf
C:\WINDOWS\network diagnostic\Baca AQ.rtf
C:\WINDOWS\network diagnostic\My name is Yuyun.rtf
C:\WINDOWS\Offline Web Pages\Baca AQ.rtf
C:\WINDOWS\Offline Web Pages\My name is Yuyun.rtf
C:\WINDOWS\Options\Baca AQ.rtf
C:\WINDOWS\Options\My name is Yuyun.rtf
C:\WINDOWS\pchealth\Baca AQ.rtf
C:\WINDOWS\pchealth\My name is Yuyun.rtf
C:\WINDOWS\PeerNet\Baca AQ.rtf
C:\WINDOWS\PeerNet\My name is Yuyun.rtf
C:\WINDOWS\PIF\Baca AQ.rtf
C:\WINDOWS\PIF\My name is Yuyun.rtf
C:\WINDOWS\Prefetch\Baca AQ.rtf
C:\WINDOWS\Prefetch\My name is Yuyun.rtf
C:\WINDOWS\Provisioning\Baca AQ.rtf
C:\WINDOWS\Provisioning\My name is Yuyun.rtf
C:\WINDOWS\pss\Baca AQ.rtf
C:\WINDOWS\pss\My name is Yuyun.rtf
C:\WINDOWS\RegisteredPackages\Baca AQ.rtf
C:\WINDOWS\RegisteredPackages\My name is Yuyun.rtf
C:\WINDOWS\Registration\Baca AQ.rtf
C:\WINDOWS\Registration\My name is Yuyun.rtf
C:\WINDOWS\repair\Baca AQ.rtf
C:\WINDOWS\repair\My name is Yuyun.rtf
C:\WINDOWS\Resources\Baca AQ.rtf
C:\WINDOWS\Resources\My name is Yuyun.rtf
C:\WINDOWS\SBM\Baca AQ.rtf
C:\WINDOWS\SBM\My name is Yuyun.rtf
C:\WINDOWS\SEC\Baca AQ.rtf
C:\WINDOWS\SEC\My name is Yuyun.rtf
C:\WINDOWS\security\Baca AQ.rtf
C:\WINDOWS\security\My name is Yuyun.rtf
C:\WINDOWS\SoftwareDistribution\Baca AQ.rtf
C:\WINDOWS\SoftwareDistribution\My name is Yuyun.rtf
C:\WINDOWS\srchasst\Baca AQ.rtf
C:\WINDOWS\srchasst\My name is Yuyun.rtf
C:\WINDOWS\Sun\Baca AQ.rtf
C:\WINDOWS\Sun\My name is Yuyun.rtf
C:\WINDOWS\system\Baca AQ.rtf
C:\WINDOWS\system\My name is Yuyun.rtf
C:\WINDOWS\system32\Baca AQ.rtf
C:\WINDOWS\system32\My name is Yuyun.rtf
C:\WINDOWS\twain_32\Baca AQ.rtf
C:\WINDOWS\twain_32\My name is Yuyun.rtf
C:\WINDOWS\UMediaPlayerActiveXPlugin\Baca AQ.rtf
C:\WINDOWS\UMediaPlayerActiveXPlugin\My name is Yuyun.rtf
C:\WINDOWS\usb-audio.deMaya44\Baca AQ.rtf
C:\WINDOWS\usb-audio.deMaya44\My name is Yuyun.rtf
C:\WINDOWS\WBEM\Baca AQ.rtf
C:\WINDOWS\WBEM\My name is Yuyun.rtf
C:\WINDOWS\Web\Baca AQ.rtf
C:\WINDOWS\Web\My name is Yuyun.rtf
C:\WINDOWS\WinSxS\Baca AQ.rtf
C:\WINDOWS\WinSxS\My name is Yuyun.rtf
F:\.Trash-500\files\My name is Yuyun.rtf
F:\.Trash-500\files\Baca AQ.rtf
F:\.Trash-500\files\My name is Yuyun.2.rtf
F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\Baca AQ.rtf
F:\.Trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Baca AQ.rtf
F:\.Trash-500\files\c.traff\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Action Plans\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Action Plans\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Baca AQ.rtf
F:\.Trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Eduacational Forum Planning\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Eduacational Forum Planning\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\intro for new volunteers\Baca AQ.rtf
F:\.Trash-500\files\c.traff\intro for new volunteers\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Minutes from Meetings\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Minutes from Meetings\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Resources\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Resources\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Schools' Programme\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Schools' Programme\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Senya Beraku Questionnaires\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Winneba project\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Winneba project\My name is Yuyun.rtf
F:\.Trash-500\files\c.traff\Yeji materials\Baca AQ.rtf
F:\.Trash-500\files\c.traff\Yeji materials\My name is Yuyun.rtf
F:\.Trash-500\files\curice\Baca AQ.rtf
F:\.Trash-500\files\curice\My name is Yuyun.rtf
F:\.Trash-500\files\SVETEJEBLO\Baca AQ.rtf
F:\.Trash-500\files\SVETEJEBLO\My name is Yuyun.rtf
F:\.Trash-500\files\TUGOMOJAAA\Baca AQ.rtf
F:\.Trash-500\files\TUGOMOJAAA\My name is Yuyun.rtf
F:\9ja\Baca AQ.rtf
F:\9ja\annette cookey\Baca AQ.rtf
F:\9ja\annette cookey\My name is Yuyun.rtf
F:\9ja\bigiano\Baca AQ.rtf
F:\9ja\bigiano\My name is Yuyun.rtf
F:\9ja\Idibia\Baca AQ.rtf
F:\9ja\Idibia\My name is Yuyun.rtf
F:\9ja\iyanya's single\Baca AQ.rtf
F:\9ja\iyanya's single\My name is Yuyun.rtf
F:\9ja\kelli hansom\Baca AQ.rtf
F:\9ja\kelli hansom\My name is Yuyun.rtf
F:\9ja\M.I\Baca AQ.rtf
F:\9ja\M.I\My name is Yuyun.rtf
F:\ADOBE AUDITION SOFTS\Baca AQ.rtf
F:\ADOBE AUDITION SOFTS\My name is Yuyun.rtf
F:\ALKOHOLU\Baca AQ.rtf
F:\ALKOHOLU\My name is Yuyun.rtf
F:\b03230418097ce8b3b\Baca AQ.rtf
F:\b03230418097ce8b3b\My name is Yuyun.rtf
F:\b03230418097ce8b3b\amd64\Baca AQ.rtf
F:\b03230418097ce8b3b\amd64\My name is Yuyun.rtf
F:\b03230418097ce8b3b\i386\Baca AQ.rtf
F:\b03230418097ce8b3b\i386\My name is Yuyun.rtf
F:\Documentation\Baca AQ.rtf
F:\Documentation\My name is Yuyun.rtf
F:\Documentation\ARA\Baca AQ.rtf
F:\Documentation\ARA\My name is Yuyun.rtf
F:\Documentation\CHS\Baca AQ.rtf
F:\Documentation\CHS\My name is Yuyun.rtf
F:\Documentation\CHT\Baca AQ.rtf
F:\Documentation\CHT\My name is Yuyun.rtf
F:\Documentation\CZE\Baca AQ.rtf
F:\Documentation\CZE\My name is Yuyun.rtf
F:\Documentation\DAN\Baca AQ.rtf
F:\Documentation\DAN\My name is Yuyun.rtf
F:\Documentation\DEU\Baca AQ.rtf
F:\Documentation\DEU\My name is Yuyun.rtf
F:\Documentation\ENG\Baca AQ.rtf
F:\Documentation\ENG\My name is Yuyun.rtf
F:\Documentation\ESN\Baca AQ.rtf
F:\Documentation\ESN\My name is Yuyun.rtf
F:\Documentation\FIN\Baca AQ.rtf
F:\Documentation\FIN\My name is Yuyun.rtf
F:\Documentation\FRA\Baca AQ.rtf
F:\Documentation\FRA\My name is Yuyun.rtf
F:\Documentation\GRE\Baca AQ.rtf
F:\Documentation\GRE\My name is Yuyun.rtf
F:\Documentation\ITA\Baca AQ.rtf
F:\Documentation\ITA\My name is Yuyun.rtf
F:\Documentation\JPN\Baca AQ.rtf
F:\Documentation\JPN\My name is Yuyun.rtf
F:\Documentation\KOR\Baca AQ.rtf
F:\Documentation\KOR\My name is Yuyun.rtf
F:\Documentation\NLD\Baca AQ.rtf
F:\Documentation\NLD\My name is Yuyun.rtf
F:\Documentation\NOR\Baca AQ.rtf
F:\Documentation\NOR\My name is Yuyun.rtf
F:\Documentation\POL\Baca AQ.rtf
F:\Documentation\POL\My name is Yuyun.rtf
F:\Documentation\POR\Baca AQ.rtf
F:\Documentation\POR\My name is Yuyun.rtf
F:\Documentation\RUS\Baca AQ.rtf
F:\Documentation\RUS\My name is Yuyun.rtf
F:\Documentation\SLO\Baca AQ.rtf
F:\Documentation\SLO\My name is Yuyun.rtf
F:\Documentation\SWE\Baca AQ.rtf
F:\Documentation\SWE\My name is Yuyun.rtf
F:\Documentation\TUR\Baca AQ.rtf
F:\Documentation\TUR\My name is Yuyun.rtf
F:\Festplatte\Baca AQ.rtf
F:\Festplatte\My name is Yuyun.rtf
F:\Festplatte\Anwendungen\Baca AQ.rtf
F:\Festplatte\Anwendungen\My name is Yuyun.rtf
F:\Festplatte\Dokumentationen\Baca AQ.rtf
F:\Festplatte\Dokumentationen\My name is Yuyun.rtf
F:\Festplatte\Filme\Baca AQ.rtf
F:\Festplatte\Filme\My name is Yuyun.rtf
F:\Festplatte\Installationsdateien\Baca AQ.rtf
F:\Festplatte\Installationsdateien\My name is Yuyun.rtf
F:\Festplatte\Musik\Baca AQ.rtf
F:\Festplatte\Musik\My name is Yuyun.rtf
F:\Festplatte\Serien\Baca AQ.rtf
F:\Festplatte\Serien\My name is Yuyun.rtf
F:\System Volume Information\Baca AQ.rtf
F:\System Volume Information\My name is Yuyun.rtf
F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\Baca AQ.rtf
F:\System Volume Information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\My name is Yuyun.rtf
F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\Baca AQ.rtf
F:\System Volume Information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\My name is Yuyun.rtf
F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\Baca AQ.rtf
F:\System Volume Information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\My name is Yuyun.rtf
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\Baca AQ.rtf
F:\System Volume Information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\My name is Yuyun.rtf
F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\Baca AQ.rtf
F:\System Volume Information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\My name is Yuyun.rtf
F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\Baca AQ.rtf
F:\System Volume Information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\My name is Yuyun.rtf
F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\Baca AQ.rtf
F:\System Volume Information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\My name is Yuyun.rtf
F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\Baca AQ.rtf
F:\System Volume Information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\My name is Yuyun.rtf
F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\Baca AQ.rtf
F:\System Volume Information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\My name is Yuyun.rtf
F:\Usb 2.0 Driver\Baca AQ.rtf
F:\Usb 2.0 Driver\My name is Yuyun.rtf
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\Baca AQ.rtf
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\My name is Yuyun.rtf
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Baca AQ.rtf
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\My name is Yuyun.rtf
"2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\*.tmp -> ]
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Baca AQ.rtf
F:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\My name is Yuyun.rtf
F:\WD Sync Data\Baca AQ.rtf
F:\WD Sync Data\My name is Yuyun.rtf
F:\WD Sync Data\Lucas\Baca AQ.rtf
F:\WD Sync Data\Lucas\My name is Yuyun.rtf
F:\WD_Windows_Tools\Baca AQ.rtf
F:\WD_Windows_Tools\My name is Yuyun.rtf
F:\WD_Windows_Tools\Adobe\Baca AQ.rtf
F:\WD_Windows_Tools\Adobe\My name is Yuyun.rtf
F:\WD_Windows_Tools\Documentation\Baca AQ.rtf
F:\WD_Windows_Tools\Documentation\My name is Yuyun.rtf
F:\WD_Windows_Tools\EULA\Baca AQ.rtf
F:\WD_Windows_Tools\EULA\My name is Yuyun.rtf
F:\WD_Windows_Tools\Google\Baca AQ.rtf
F:\WD_Windows_Tools\Google\My name is Yuyun.rtf
F:\WDsync\Baca AQ.rtf
F:\WDsync\My name is Yuyun.rtf


Posted Image

Once saved, referring to the picture above, drag CFScript.txt into ComboFix.exe, and post back the resulting report.
  • 0

#11
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Hello again,

do not worry about the file that I was trying to open. I found the mistake I did.

Yuyun_Cantix creates Shortcuts to the folders (i.e. in a folder "F:\x\xyz" it will create a shortcut "xyz.Ink"), and when you try to open them with the Run Command window, it doesn't work. Not a problem though. Do not worry about it anymore.

I will now proceed with ComboFix log.

Edited by ldeecke, 19 April 2010 - 01:58 PM.

  • 0

#12
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
Isn't Yuyun_Cantix the one responsible of all theses files?
  • 0

#13
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
Yes. Yuyun_Cantix created all these files.

Here goes the ComboFix log:

-----------------------------------------

ComboFix 10-04-17.07 - Lucas Deecke 19.04.2010 22:04:29.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.49.1031.18.1022.687 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Lucas Deecke\Desktop\Combo-Fix.exe
Benutzte Befehlsschalter :: c:\dokumente und einstellungen\Lucas Deecke\Desktop\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\desinfectlogs\Baca AQ.rtf"
"c:\desinfectlogs\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Baca AQ.rtf"
"c:\dokumente und einstellungen\Default User\Baca AQ.rtf"
"c:\dokumente und einstellungen\Default User\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\LocalService\Baca AQ.rtf"
"c:\dokumente und einstellungen\LocalService\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Ableton\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Audible\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Audible\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Downloads\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Downloads\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Filme\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Filme\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\licenses\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\licenses\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\readmes\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\readmes\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Updater\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Updater\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\Baca AQ.rtf"
"c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\My name is Yuyun.rtf"
"c:\dokumente und einstellungen\NetworkService\Baca AQ.rtf"
"c:\dokumente und einstellungen\NetworkService\My name is Yuyun.rtf"
"c:\downloads\Baca AQ.rtf"
"c:\downloads\My name is Yuyun.rtf"
"c:\dvdvideosoft\Baca AQ.rtf"
"c:\dvdvideosoft\My name is Yuyun.rtf"
"c:\dvdvideosoft\Temp\Baca AQ.rtf"
"c:\dvdvideosoft\Temp\My name is Yuyun.rtf"
"c:\installationsdateien\Baca AQ.rtf"
"c:\installationsdateien\My name is Yuyun.rtf"
"c:\installationsdateien\Omegadriver\Baca AQ.rtf"
"c:\installationsdateien\Omegadriver\My name is Yuyun.rtf"
"c:\installationsdateien\Soundtreiber DigitalMAX2\Baca AQ.rtf"
"c:\installationsdateien\Soundtreiber DigitalMAX2\My name is Yuyun.rtf"
"c:\installationsdateien\WirelasscardDriver\Baca AQ.rtf"
"c:\installationsdateien\WirelasscardDriver\My name is Yuyun.rtf"
"c:\intel\Baca AQ.rtf"
"c:\intel\Intel® PRO Wireless Network Connection ID Tool\Baca AQ.rtf"
"c:\intel\Intel® PRO Wireless Network Connection ID Tool\My name is Yuyun.rtf"
"c:\intel\My name is Yuyun.rtf"
"c:\programme\Ableton\Baca AQ.rtf"
"c:\programme\Ableton\My name is Yuyun.rtf"
"c:\programme\Adobe\Baca AQ.rtf"
"c:\programme\Adobe\My name is Yuyun.rtf"
"c:\programme\Alcohol\Baca AQ.rtf"
"c:\programme\Alcohol\My name is Yuyun.rtf"
"c:\programme\Analog Devices\Baca AQ.rtf"
"c:\programme\Analog Devices\My name is Yuyun.rtf"
"c:\programme\Apple Software Update\Baca AQ.rtf"
"c:\programme\Apple Software Update\My name is Yuyun.rtf"
"c:\programme\ATI Technologies\Baca AQ.rtf"
"c:\programme\ATI Technologies\My name is Yuyun.rtf"
"c:\programme\Audacity\Baca AQ.rtf"
"c:\programme\Audacity\My name is Yuyun.rtf"
"c:\programme\AVIcodec\Baca AQ.rtf"
"c:\programme\AVIcodec\My name is Yuyun.rtf"
"c:\programme\Avira\Baca AQ.rtf"
"c:\programme\Avira\My name is Yuyun.rtf"
"c:\programme\AVOne\Baca AQ.rtf"
"c:\programme\AVOne\My name is Yuyun.rtf"
"c:\programme\Bonjour\About Bonjour.rtf"
"c:\programme\Bonjour\Baca AQ.rtf"
"c:\programme\Bonjour\My name is Yuyun.rtf"
"c:\programme\Broadcom\Baca AQ.rtf"
"c:\programme\Broadcom\My name is Yuyun.rtf"
"c:\programme\CCleaner\Baca AQ.rtf"
"c:\programme\CCleaner\My name is Yuyun.rtf"
"c:\programme\Cubase LE\Baca AQ.rtf"
"c:\programme\Cubase LE\My name is Yuyun.rtf"
"c:\programme\Cubase\Baca AQ.rtf"
"c:\programme\Cubase\My name is Yuyun.rtf"
"c:\programme\CyberLink\Baca AQ.rtf"
"c:\programme\CyberLink\My name is Yuyun.rtf"
"c:\programme\Daemontools Light\Baca AQ.rtf"
"c:\programme\Daemontools Light\My name is Yuyun.rtf"
"c:\programme\dBpoweramp\Baca AQ.rtf"
"c:\programme\dBpoweramp\My name is Yuyun.rtf"
"c:\programme\devolo\Baca AQ.rtf"
"c:\programme\devolo\My name is Yuyun.rtf"
"c:\programme\DivX\Baca AQ.rtf"
"c:\programme\DivX\My name is Yuyun.rtf"
"c:\programme\File Scanner Library (Spybot - Search & Destroy)\Baca AQ.rtf"
"c:\programme\File Scanner Library (Spybot - Search & Destroy)\My name is Yuyun.rtf"
"c:\programme\FlashFXP\Baca AQ.rtf"
"c:\programme\FlashFXP\My name is Yuyun.rtf"
"c:\programme\Fraps\Baca AQ.rtf"
"c:\programme\Fraps\My name is Yuyun.rtf"
"c:\programme\Free Audio Converter\Baca AQ.rtf"
"c:\programme\Free Audio Converter\My name is Yuyun.rtf"
"c:\programme\GameOS\Baca AQ.rtf"
"c:\programme\GameOS\My name is Yuyun.rtf"
"c:\programme\Google\Baca AQ.rtf"
"c:\programme\Google\My name is Yuyun.rtf"
"c:\programme\Hewlett-Packard\Baca AQ.rtf"
"c:\programme\Hewlett-Packard\My name is Yuyun.rtf"
"c:\programme\HP\Baca AQ.rtf"
"c:\programme\HP\My name is Yuyun.rtf"
"c:\programme\ICQ\Baca AQ.rtf"
"c:\programme\ICQ\My name is Yuyun.rtf"
"c:\programme\IEEE 802.11 WIRELESS LAN\Baca AQ.rtf"
"c:\programme\IEEE 802.11 WIRELESS LAN\My name is Yuyun.rtf"
"c:\programme\Illustrate\Baca AQ.rtf"
"c:\programme\Illustrate\My name is Yuyun.rtf"
"c:\programme\Image-Line\Baca AQ.rtf"
"c:\programme\Image-Line\My name is Yuyun.rtf"
"c:\programme\InstallShield Installation Information\Baca AQ.rtf"
"c:\programme\InstallShield Installation Information\My name is Yuyun.rtf"
"c:\programme\Intel\Baca AQ.rtf"
"c:\programme\Intel\My name is Yuyun.rtf"
"c:\programme\Internet Explorer\Baca AQ.rtf"
"c:\programme\Internet Explorer\My name is Yuyun.rtf"
"c:\programme\iPod\Acknowledgements.rtf"
"c:\programme\iPod\Baca AQ.rtf"
"c:\programme\iPod\My name is Yuyun.rtf"
"c:\programme\IrfanView\Baca AQ.rtf"
"c:\programme\IrfanView\My name is Yuyun.rtf"
"c:\programme\iTunes\Acknowledgements.rtf"
"c:\programme\iTunes\Baca AQ.rtf"
"c:\programme\iTunes\My name is Yuyun.rtf"
"c:\programme\Java\Baca AQ.rtf"
"c:\programme\Java\My name is Yuyun.rtf"
"c:\programme\K-Lite Codec Pack\Baca AQ.rtf"
"c:\programme\K-Lite Codec Pack\Info\readme.rtf"
"c:\programme\K-Lite Codec Pack\My name is Yuyun.rtf"
"c:\programme\Lavasoft\Baca AQ.rtf"
"c:\programme\Lavasoft\My name is Yuyun.rtf"
"c:\programme\LimeWire\Baca AQ.rtf"
"c:\programme\LimeWire\My name is Yuyun.rtf"
"c:\programme\Logitech\Baca AQ.rtf"
"c:\programme\Logitech\My name is Yuyun.rtf"
"c:\programme\Macromedia\Baca AQ.rtf"
"c:\programme\Macromedia\My name is Yuyun.rtf"
"c:\programme\MagicISO\Baca AQ.rtf"
"c:\programme\MagicISO\My name is Yuyun.rtf"
"c:\programme\Malwarebytes' Anti-Malware\Baca AQ.rtf"
"c:\programme\Malwarebytes' Anti-Malware\My name is Yuyun.rtf"
"c:\programme\Medieval CUE Splitter\Baca AQ.rtf"
"c:\programme\Medieval CUE Splitter\My name is Yuyun.rtf"
"c:\programme\Messenger Plus!\Baca AQ.rtf"
"c:\programme\Messenger Plus!\My name is Yuyun.rtf"
"c:\programme\Messenger\Baca AQ.rtf"
"c:\programme\Messenger\My name is Yuyun.rtf"
"c:\programme\Microsoft CAPICOM 2.1.0.2\Baca AQ.rtf"
"c:\programme\Microsoft CAPICOM 2.1.0.2\My name is Yuyun.rtf"
"c:\programme\microsoft frontpage\Baca AQ.rtf"
"c:\programme\microsoft frontpage\My name is Yuyun.rtf"
"c:\programme\Microsoft SQL Server\Baca AQ.rtf"
"c:\programme\Microsoft SQL Server\My name is Yuyun.rtf"
"c:\programme\mIRC\Baca AQ.rtf"
"c:\programme\mIRC\My name is Yuyun.rtf"
"c:\programme\Misc. Support Library (Spybot - Search & Destroy)\Baca AQ.rtf"
"c:\programme\Misc. Support Library (Spybot - Search & Destroy)\My name is Yuyun.rtf"
"c:\programme\Movie Maker\Baca AQ.rtf"
"c:\programme\Movie Maker\My name is Yuyun.rtf"
"c:\programme\Mozilla Firefox\Baca AQ.rtf"
"c:\programme\Mozilla Firefox\My name is Yuyun.rtf"
"c:\programme\Mozilla Sunbird\Baca AQ.rtf"
"c:\programme\Mozilla Sunbird\My name is Yuyun.rtf"
"c:\programme\Mozilla Thunderbird\Baca AQ.rtf"
"c:\programme\Mozilla Thunderbird\My name is Yuyun.rtf"
"c:\programme\MSN Gaming Zone\Baca AQ.rtf"
"c:\programme\MSN Gaming Zone\My name is Yuyun.rtf"
"c:\programme\MSXML 4.0\Baca AQ.rtf"
"c:\programme\MSXML 4.0\My name is Yuyun.rtf"
"c:\programme\MultiRes\Baca AQ.rtf"
"c:\programme\MultiRes\My name is Yuyun.rtf"
"c:\programme\Native Instruments\Baca AQ.rtf"
"c:\programme\Native Instruments\My name is Yuyun.rtf"
"c:\programme\NetMeeting\Baca AQ.rtf"
"c:\programme\NetMeeting\My name is Yuyun.rtf"
"c:\programme\OpenOffice.org 2.2\Baca AQ.rtf"
"c:\programme\OpenOffice.org 2.2\My name is Yuyun.rtf"
"c:\programme\OpenOffice.org 2.4\Baca AQ.rtf"
"c:\programme\OpenOffice.org 2.4\My name is Yuyun.rtf"
"c:\programme\OpenOffice.org 3\Baca AQ.rtf"
"c:\programme\OpenOffice.org 3\My name is Yuyun.rtf"
"c:\programme\Opera\Baca AQ.rtf"
"c:\programme\Opera\My name is Yuyun.rtf"
"c:\programme\Orbitdownloader\Baca AQ.rtf"
"c:\programme\Orbitdownloader\My name is Yuyun.rtf"
"c:\programme\Outlook Express\Baca AQ.rtf"
"c:\programme\Outlook Express\My name is Yuyun.rtf"
"c:\programme\Phoenix Technologies Ltd\Baca AQ.rtf"
"c:\programme\Phoenix Technologies Ltd\My name is Yuyun.rtf"
"c:\programme\PIC\Baca AQ.rtf"
"c:\programme\PIC\My name is Yuyun.rtf"
"c:\programme\QuickTime\Baca AQ.rtf"
"c:\programme\QuickTime\My name is Yuyun.rtf"
"c:\programme\Radeon Omega Driver\Baca AQ.rtf"
"c:\programme\Radeon Omega Driver\My name is Yuyun.rtf"
"c:\programme\Rapid Evolution\Baca AQ.rtf"
"c:\programme\Rapid Evolution\My name is Yuyun.rtf"
"c:\programme\RegCleaner\Baca AQ.rtf"
"c:\programme\RegCleaner\My name is Yuyun.rtf"
"c:\programme\Samsung\Baca AQ.rtf"
"c:\programme\Samsung\My name is Yuyun.rtf"
"c:\programme\SDHelper (Spybot - Search & Destroy)\Baca AQ.rtf"
"c:\programme\SDHelper (Spybot - Search & Destroy)\My name is Yuyun.rtf"
"c:\programme\Skype\Baca AQ.rtf"
"c:\programme\Skype\My name is Yuyun.rtf"
"c:\programme\Sony Vegas\Baca AQ.rtf"
"c:\programme\Sony Vegas\My name is Yuyun.rtf"
"c:\programme\Sony\Baca AQ.rtf"
"c:\programme\Sony\My name is Yuyun.rtf"
"c:\programme\Sound Forge\Baca AQ.rtf"
"c:\programme\Sound Forge\My name is Yuyun.rtf"
"c:\programme\Spybot - Search & Destroy\Baca AQ.rtf"
"c:\programme\Spybot - Search & Destroy\My name is Yuyun.rtf"
"c:\programme\SRS Labs\Baca AQ.rtf"
"c:\programme\SRS Labs\My name is Yuyun.rtf"
"c:\programme\Syncrosoft\Baca AQ.rtf"
"c:\programme\Syncrosoft\LCC\Release Notes.rtf"
"c:\programme\Syncrosoft\My name is Yuyun.rtf"
"c:\programme\Teamspeak2\Baca AQ.rtf"
"c:\programme\Teamspeak2\My name is Yuyun.rtf"
"c:\programme\TeaTimer (Spybot - Search & Destroy)\Baca AQ.rtf"
"c:\programme\TeaTimer (Spybot - Search & Destroy)\My name is Yuyun.rtf"
"c:\programme\Tortun\Baca AQ.rtf"
"c:\programme\Tortun\My name is Yuyun.rtf"
"c:\programme\Uninstall Information\Baca AQ.rtf"
"c:\programme\Uninstall Information\My name is Yuyun.rtf"
"c:\programme\VideoLAN\Baca AQ.rtf"
"c:\programme\VideoLAN\My name is Yuyun.rtf"
"c:\programme\WaveLab\Baca AQ.rtf"
"c:\programme\WaveLab\My name is Yuyun.rtf"
"c:\programme\Western Digital\Baca AQ.rtf"
"c:\programme\Western Digital\My name is Yuyun.rtf"
"c:\programme\Winamp\Baca AQ.rtf"
"c:\programme\Winamp\My name is Yuyun.rtf"
"c:\programme\Windows Live\Baca AQ.rtf"
"c:\programme\Windows Live\My name is Yuyun.rtf"
"c:\programme\Windows Media Connect 2\Baca AQ.rtf"
"c:\programme\Windows Media Connect 2\My name is Yuyun.rtf"
"c:\programme\Windows Media Player\Baca AQ.rtf"
"c:\programme\Windows Media Player\My name is Yuyun.rtf"
"c:\programme\Windows NT\Baca AQ.rtf"
"c:\programme\Windows NT\My name is Yuyun.rtf"
"c:\programme\WindowsUpdate\Baca AQ.rtf"
"c:\programme\WindowsUpdate\My name is Yuyun.rtf"
"c:\programme\Winrar\Baca AQ.rtf"
"c:\programme\Winrar\My name is Yuyun.rtf"
"c:\programme\xerox\Baca AQ.rtf"
"c:\programme\xerox\My name is Yuyun.rtf"
"c:\programme\Xvid\Baca AQ.rtf"
"c:\programme\Xvid\My name is Yuyun.rtf"
"c:\programme\Yahoo!\Baca AQ.rtf"
"c:\programme\Yahoo!\My name is Yuyun.rtf"
"c:\programme\Youtube Converter\Baca AQ.rtf"
"c:\programme\Youtube Converter\My name is Yuyun.rtf"
"c:\programme\Zero G Registry\Baca AQ.rtf"
"c:\programme\Zero G Registry\My name is Yuyun.rtf"
"c:\temp\Baca AQ.rtf"
"c:\temp\My name is Yuyun.rtf"
"c:\windows\$hf_mig$\Baca AQ.rtf"
"c:\windows\$hf_mig$\My name is Yuyun.rtf"
"c:\windows\$MSI31Uninstall_KB893803v2$\Baca AQ.rtf"
"c:\windows\$MSI31Uninstall_KB893803v2$\My name is Yuyun.rtf"
"c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\Baca AQ.rtf"
"c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\My name is Yuyun.rtf"
"c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\Baca AQ.rtf"
"c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB834707$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB834707$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB867282$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB867282$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB873339$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB873339$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB883523$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB883523$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB884575$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB884575$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB885250$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB885250$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB885835$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB885835$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB885836$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB885836$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB886185$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB886185$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB887472$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB887472$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB888113$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB888113$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB888302$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB888302$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB890046$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB890046$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB890175$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB890175$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB890859$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB890859$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB891781$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB891781$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB893756$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB893756$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB894391$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB894391$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB896358$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB896358$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB896423$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB896423$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB896424$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB896424$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB896428$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB896428$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB898461$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB898461$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB899587$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB899587$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB899591$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB899591$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB900485$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB900485$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB900725$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB900725$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB901017$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB901017$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB901214$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB901214$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB902400$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB902400$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB904706$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB904706$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB904942$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB904942$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB905414$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB905414$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB905749$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB905749$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB908519$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB908519$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB908531$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB908531$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB910437$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB910437$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB911280$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB911280$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB911562$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB911562$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB911564$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB911564$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB911567$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB911567$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB911927$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB911927$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB912919$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB912919$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB913580$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB913580$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB914388$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB914388$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB914389$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB914389$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB914440$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB914440$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB915865$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB915865$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB916595$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB916595$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB917344$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB917344$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB917422$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB917422$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB917734_WMP10$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB917734_WMP10$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB917953$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB917953$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB918118$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB918118$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB918439$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB918439$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB918899$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB918899$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB919007$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB919007$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920213$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920213$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920214$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920214$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920670$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920670$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920683$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920683$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920685$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920685$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB920872$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB920872$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB921398$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB921398$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB921503$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB921503$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB921883$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB921883$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB922582$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB922582$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB922616$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB922616$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB922760$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB922760$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB922819$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB922819$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923191$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923191$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923414$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923414$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923561$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923561$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923689$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923689$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923694$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923694$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB923980$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB923980$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB924191$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB924191$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB924270$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB924270$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB924496$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB924496$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB924667$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB924667$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB925398_WMP64$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB925398_WMP64$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB925454$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB925454$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB925486$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB925486$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB925902$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB925902$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB926239$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB926239$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB926255$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB926255$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB926436$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB926436$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB927779$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB927779$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB927802$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB927802$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB927891$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB927891$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB928090$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB928090$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB928255$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB928255$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB928843$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB928843$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB929123$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB929123$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB929338$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB929338$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB929399$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB929399$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB929969$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB929969$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB930178$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB930178$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB930916$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB930916$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB931261$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB931261$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB931768$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB931768$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB931784$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB931784$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB931836$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB931836$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB932168$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB932168$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB932823-v3$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB932823-v3$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB933360$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB933360$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB933566$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB933566$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB933729$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB933729$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB935839$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB935839$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB935840$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB935840$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB936021$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB936021$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB936357$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB936357$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB936782_WMP11$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB936782_WMP11$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB937143$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB937143$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB938127$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB938127$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB938464$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB938464$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB938828$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB938828$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB938829$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB938829$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB939653$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB939653$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB939683$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB939683$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB941202$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB941202$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB941568$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB941568$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB941569$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB941569$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB941644$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB941644$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB941693$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB941693$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB942615$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB942615$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB942763$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB942763$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB942840$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB942840$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB943055$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB943055$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB943460$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB943460$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB943485$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB943485$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB944533$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB944533$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB944653$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB944653$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB945553$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB945553$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB946026$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB946026$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB946627$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB946627$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB946648$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB946648$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB948590$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB948590$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB948881$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB948881$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB950749$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB950749$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB950760$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB950760$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB950762$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB950762$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB950974$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB950974$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951066$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951066$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951072-v2$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951072-v2$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951376-v2$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951376-v2$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951376$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951376$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951698$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951698$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB951748$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB951748$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB952004$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB952004$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB952069_WM9$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB952069_WM9$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB952287$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB952287$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB952954$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB952954$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB953839$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB953839$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB954154_WM11$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB954154_WM11$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB954211$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB954211$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB954600$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB954600$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB955069$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB955069$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB955839$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB955839$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB956391$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB956391$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB956572$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB956572$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB956802$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB956802$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB956803$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB956803$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB956841$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB956841$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB957095$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB957095$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB957097$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB957097$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB958644$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB958644$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB958687$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB958687$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB958690$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB958690$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB959426$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB959426$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB959772_WM11$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB959772_WM11$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB960225$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB960225$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB960715$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB960715$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB960803$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB960803$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB961373$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB961373$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB961501$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB961501$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB967715$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB967715$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB968537$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB968537$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB969898$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB969898$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallKB970238$\Baca AQ.rtf"
"c:\windows\$NtUninstallKB970238$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallMSCompPackV1$\Baca AQ.rtf"
"c:\windows\$NtUninstallMSCompPackV1$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallWdf01005$\Baca AQ.rtf"
"c:\windows\$NtUninstallWdf01005$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallWMFDist11$\Baca AQ.rtf"
"c:\windows\$NtUninstallWMFDist11$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallwmp11$\Baca AQ.rtf"
"c:\windows\$NtUninstallwmp11$\My name is Yuyun.rtf"
"c:\windows\$NtUninstallWudf01000$\Baca AQ.rtf"
"c:\windows\$NtUninstallWudf01000$\My name is Yuyun.rtf"
"c:\windows\.jagex_cache_32\Baca AQ.rtf"
"c:\windows\.jagex_cache_32\My name is Yuyun.rtf"
"c:\windows\addins\Baca AQ.rtf"
"c:\windows\addins\My name is Yuyun.rtf"
"c:\windows\amana_asset\Baca AQ.rtf"
"c:\windows\amana_asset\My name is Yuyun.rtf"
"c:\windows\AppPatch\Baca AQ.rtf"
"c:\windows\AppPatch\My name is Yuyun.rtf"
"c:\windows\assembly\Baca AQ.rtf"
"c:\windows\assembly\My name is Yuyun.rtf"
"c:\windows\Baca AQ.rtf"
"c:\windows\Config\Baca AQ.rtf"
"c:\windows\Config\My name is Yuyun.rtf"
"c:\windows\Connection Wizard\Baca AQ.rtf"
"c:\windows\Connection Wizard\My name is Yuyun.rtf"
"c:\windows\Cursors\Baca AQ.rtf"
"c:\windows\Cursors\My name is Yuyun.rtf"
"c:\windows\Debug\Baca AQ.rtf"
"c:\windows\Debug\My name is Yuyun.rtf"
"c:\windows\Docs\Baca AQ.rtf"
"c:\windows\Docs\My name is Yuyun.rtf"
"c:\windows\Downloaded Installations\Baca AQ.rtf"
"c:\windows\Downloaded Installations\My name is Yuyun.rtf"
"c:\windows\Downloaded Program Files\Baca AQ.rtf"
"c:\windows\Downloaded Program Files\My name is Yuyun.rtf"
"c:\windows\Driver Cache\Baca AQ.rtf"
"c:\windows\Driver Cache\My name is Yuyun.rtf"
"c:\windows\Fonts\Baca AQ.rtf"
"c:\windows\Fonts\My name is Yuyun.rtf"
"c:\windows\Help\Baca AQ.rtf"
"c:\windows\Help\My name is Yuyun.rtf"
"c:\windows\I386_old\Baca AQ.rtf"
"c:\windows\I386_old\My name is Yuyun.rtf"
"c:\windows\ie7updates\Baca AQ.rtf"
"c:\windows\ie7updates\My name is Yuyun.rtf"
"c:\windows\ime\Baca AQ.rtf"
"c:\windows\ime\My name is Yuyun.rtf"
"c:\windows\inf\Baca AQ.rtf"
"c:\windows\inf\My name is Yuyun.rtf"
"c:\windows\Installer\Baca AQ.rtf"
"c:\windows\Installer\My name is Yuyun.rtf"
"c:\windows\java\Baca AQ.rtf"
"c:\windows\java\My name is Yuyun.rtf"
"c:\windows\Logs\Baca AQ.rtf"
"c:\windows\Logs\My name is Yuyun.rtf"
"c:\windows\Media\Baca AQ.rtf"
"c:\windows\Media\My name is Yuyun.rtf"
"c:\windows\Microsoft.NET\Baca AQ.rtf"
"c:\windows\Microsoft.NET\Framework\v1.1.4322\EULA.rtf"
"c:\windows\Microsoft.NET\My name is Yuyun.rtf"
"c:\windows\Minidump\Baca AQ.rtf"
"c:\windows\Minidump\My name is Yuyun.rtf"
"c:\windows\msagent\Baca AQ.rtf"
"c:\windows\msagent\My name is Yuyun.rtf"
"c:\windows\msapps\Baca AQ.rtf"
"c:\windows\msapps\My name is Yuyun.rtf"
"c:\windows\mui\Baca AQ.rtf"
"c:\windows\mui\My name is Yuyun.rtf"
"c:\windows\My name is Yuyun.rtf"
"c:\windows\network diagnostic\Baca AQ.rtf"
"c:\windows\network diagnostic\My name is Yuyun.rtf"
"c:\windows\Offline Web Pages\Baca AQ.rtf"
"c:\windows\Offline Web Pages\My name is Yuyun.rtf"
"c:\windows\Options\Baca AQ.rtf"
"c:\windows\Options\My name is Yuyun.rtf"
"c:\windows\pchealth\Baca AQ.rtf"
"c:\windows\pchealth\My name is Yuyun.rtf"
"c:\windows\PeerNet\Baca AQ.rtf"
"c:\windows\PeerNet\My name is Yuyun.rtf"
"c:\windows\PIF\Baca AQ.rtf"
"c:\windows\PIF\My name is Yuyun.rtf"
"c:\windows\Prefetch\Baca AQ.rtf"
"c:\windows\Prefetch\My name is Yuyun.rtf"
"c:\windows\Provisioning\Baca AQ.rtf"
"c:\windows\Provisioning\My name is Yuyun.rtf"
"c:\windows\pss\Baca AQ.rtf"
"c:\windows\pss\My name is Yuyun.rtf"
"c:\windows\RegisteredPackages\Baca AQ.rtf"
"c:\windows\RegisteredPackages\My name is Yuyun.rtf"
"c:\windows\Registration\Baca AQ.rtf"
"c:\windows\Registration\My name is Yuyun.rtf"
"c:\windows\repair\Baca AQ.rtf"
"c:\windows\repair\My name is Yuyun.rtf"
"c:\windows\Resources\Baca AQ.rtf"
"c:\windows\Resources\My name is Yuyun.rtf"
"c:\windows\SBM\Baca AQ.rtf"
"c:\windows\SBM\My name is Yuyun.rtf"
"c:\windows\SEC\Baca AQ.rtf"
"c:\windows\SEC\My name is Yuyun.rtf"
"c:\windows\security\Baca AQ.rtf"
"c:\windows\security\My name is Yuyun.rtf"
"c:\windows\SoftwareDistribution\Baca AQ.rtf"
"c:\windows\SoftwareDistribution\My name is Yuyun.rtf"
"c:\windows\srchasst\Baca AQ.rtf"
"c:\windows\srchasst\My name is Yuyun.rtf"
"c:\windows\Sun\Baca AQ.rtf"
"c:\windows\Sun\My name is Yuyun.rtf"
"c:\windows\system\Baca AQ.rtf"
"c:\windows\system\My name is Yuyun.rtf"
"c:\windows\system32\Baca AQ.rtf"
"c:\windows\system32\My name is Yuyun.rtf"
"c:\windows\twain_32\Baca AQ.rtf"
"c:\windows\twain_32\My name is Yuyun.rtf"
"c:\windows\UMediaPlayerActiveXPlugin\Baca AQ.rtf"
"c:\windows\UMediaPlayerActiveXPlugin\My name is Yuyun.rtf"
"c:\windows\usb-audio.deMaya44\Baca AQ.rtf"
"c:\windows\usb-audio.deMaya44\My name is Yuyun.rtf"
"c:\windows\WBEM\Baca AQ.rtf"
"c:\windows\WBEM\My name is Yuyun.rtf"
"c:\windows\Web\Baca AQ.rtf"
"c:\windows\Web\My name is Yuyun.rtf"
"c:\windows\WinSxS\Baca AQ.rtf"
"c:\windows\WinSxS\My name is Yuyun.rtf"
"f:\.trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\Baca AQ.rtf"
"f:\.trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\My name is Yuyun.rtf"
"f:\.trash-500\files\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Action Plans\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Action Plans\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Eduacational Forum Planning\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Eduacational Forum Planning\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\intro for new volunteers\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\intro for new volunteers\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Minutes from Meetings\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Minutes from Meetings\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Resources\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Resources\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Schools' Programme\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Schools' Programme\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Senya Beraku Questionnaires\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Senya Beraku Questionnaires\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Winneba project\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Winneba project\My name is Yuyun.rtf"
"f:\.trash-500\files\c.traff\Yeji materials\Baca AQ.rtf"
"f:\.trash-500\files\c.traff\Yeji materials\My name is Yuyun.rtf"
"f:\.trash-500\files\curice\Baca AQ.rtf"
"f:\.trash-500\files\curice\My name is Yuyun.rtf"
"f:\.trash-500\files\My name is Yuyun.2.rtf"
"f:\.trash-500\files\My name is Yuyun.rtf"
"f:\.trash-500\files\SVETEJEBLO\Baca AQ.rtf"
"f:\.trash-500\files\SVETEJEBLO\My name is Yuyun.rtf"
"f:\.trash-500\files\TUGOMOJAAA\Baca AQ.rtf"
"f:\.trash-500\files\TUGOMOJAAA\My name is Yuyun.rtf"
"f:\9ja\annette cookey\Baca AQ.rtf"
"f:\9ja\annette cookey\My name is Yuyun.rtf"
"f:\9ja\Baca AQ.rtf"
"f:\9ja\bigiano\Baca AQ.rtf"
"f:\9ja\bigiano\My name is Yuyun.rtf"
"f:\9ja\Idibia\Baca AQ.rtf"
"f:\9ja\Idibia\My name is Yuyun.rtf"
"f:\9ja\iyanya's single\Baca AQ.rtf"
"f:\9ja\iyanya's single\My name is Yuyun.rtf"
"f:\9ja\kelli hansom\Baca AQ.rtf"
"f:\9ja\kelli hansom\My name is Yuyun.rtf"
"f:\9ja\M.I\Baca AQ.rtf"
"f:\9ja\M.I\My name is Yuyun.rtf"
"f:\adobe audition softs\Baca AQ.rtf"
"f:\adobe audition softs\My name is Yuyun.rtf"
"f:\alkoholu\Baca AQ.rtf"
"f:\alkoholu\My name is Yuyun.rtf"
"f:\b03230418097ce8b3b\amd64\Baca AQ.rtf"
"f:\b03230418097ce8b3b\amd64\My name is Yuyun.rtf"
"f:\b03230418097ce8b3b\Baca AQ.rtf"
"f:\b03230418097ce8b3b\i386\Baca AQ.rtf"
"f:\b03230418097ce8b3b\i386\My name is Yuyun.rtf"
"f:\b03230418097ce8b3b\My name is Yuyun.rtf"
"f:\documentation\ARA\Baca AQ.rtf"
"f:\documentation\ARA\My name is Yuyun.rtf"
"f:\documentation\Baca AQ.rtf"
"f:\documentation\CHS\Baca AQ.rtf"
"f:\documentation\CHS\My name is Yuyun.rtf"
"f:\documentation\CHT\Baca AQ.rtf"
"f:\documentation\CHT\My name is Yuyun.rtf"
"f:\documentation\CZE\Baca AQ.rtf"
"f:\documentation\CZE\My name is Yuyun.rtf"
"f:\documentation\DAN\Baca AQ.rtf"
"f:\documentation\DAN\My name is Yuyun.rtf"
"f:\documentation\DEU\Baca AQ.rtf"
"f:\documentation\DEU\My name is Yuyun.rtf"
"f:\documentation\ENG\Baca AQ.rtf"
"f:\documentation\ENG\My name is Yuyun.rtf"
"f:\documentation\ESN\Baca AQ.rtf"
"f:\documentation\ESN\My name is Yuyun.rtf"
"f:\documentation\FIN\Baca AQ.rtf"
"f:\documentation\FIN\My name is Yuyun.rtf"
"f:\documentation\FRA\Baca AQ.rtf"
"f:\documentation\FRA\My name is Yuyun.rtf"
"f:\documentation\GRE\Baca AQ.rtf"
"f:\documentation\GRE\My name is Yuyun.rtf"
"f:\documentation\ITA\Baca AQ.rtf"
"f:\documentation\ITA\My name is Yuyun.rtf"
"f:\documentation\JPN\Baca AQ.rtf"
"f:\documentation\JPN\My name is Yuyun.rtf"
"f:\documentation\KOR\Baca AQ.rtf"
"f:\documentation\KOR\My name is Yuyun.rtf"
"f:\documentation\My name is Yuyun.rtf"
"f:\documentation\NLD\Baca AQ.rtf"
"f:\documentation\NLD\My name is Yuyun.rtf"
"f:\documentation\NOR\Baca AQ.rtf"
"f:\documentation\NOR\My name is Yuyun.rtf"
"f:\documentation\POL\Baca AQ.rtf"
"f:\documentation\POL\My name is Yuyun.rtf"
"f:\documentation\POR\Baca AQ.rtf"
"f:\documentation\POR\My name is Yuyun.rtf"
"f:\documentation\RUS\Baca AQ.rtf"
"f:\documentation\RUS\My name is Yuyun.rtf"
"f:\documentation\SLO\Baca AQ.rtf"
"f:\documentation\SLO\My name is Yuyun.rtf"
"f:\documentation\SWE\Baca AQ.rtf"
"f:\documentation\SWE\My name is Yuyun.rtf"
"f:\documentation\TUR\Baca AQ.rtf"
"f:\documentation\TUR\My name is Yuyun.rtf"
"f:\festplatte\Anwendungen\Baca AQ.rtf"
"f:\festplatte\Anwendungen\My name is Yuyun.rtf"
"f:\festplatte\Baca AQ.rtf"
"f:\festplatte\Dokumentationen\Baca AQ.rtf"
"f:\festplatte\Dokumentationen\My name is Yuyun.rtf"
"f:\festplatte\Filme\Baca AQ.rtf"
"f:\festplatte\Filme\My name is Yuyun.rtf"
"f:\festplatte\Installationsdateien\Baca AQ.rtf"
"f:\festplatte\Installationsdateien\My name is Yuyun.rtf"
"f:\festplatte\Musik\Baca AQ.rtf"
"f:\festplatte\Musik\My name is Yuyun.rtf"
"f:\festplatte\My name is Yuyun.rtf"
"f:\festplatte\Serien\Baca AQ.rtf"
"f:\festplatte\Serien\My name is Yuyun.rtf"
"f:\system volume information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\Baca AQ.rtf"
"f:\system volume information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\My name is Yuyun.rtf"
"f:\system volume information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\Baca AQ.rtf"
"f:\system volume information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\My name is Yuyun.rtf"
"f:\system volume information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\Baca AQ.rtf"
"f:\system volume information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\My name is Yuyun.rtf"
"f:\system volume information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\Baca AQ.rtf"
"f:\system volume information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\My name is Yuyun.rtf"
"f:\system volume information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\Baca AQ.rtf"
"f:\system volume information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\My name is Yuyun.rtf"
"f:\system volume information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\Baca AQ.rtf"
"f:\system volume information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\My name is Yuyun.rtf"
"f:\system volume information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\Baca AQ.rtf"
"f:\system volume information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\My name is Yuyun.rtf"
"f:\system volume information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\Baca AQ.rtf"
"f:\system volume information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\My name is Yuyun.rtf"
"f:\system volume information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\Baca AQ.rtf"
"f:\system volume information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\My name is Yuyun.rtf"
"f:\system volume information\Baca AQ.rtf"
"f:\system volume information\My name is Yuyun.rtf"
"f:\usb 2.0 driver\Baca AQ.rtf"
"f:\usb 2.0 driver\My name is Yuyun.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\Baca AQ.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Baca AQ.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\My name is Yuyun.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\My name is Yuyun.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Baca AQ.rtf"
"f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\My name is Yuyun.rtf"
"f:\wd sync data\Baca AQ.rtf"
"f:\wd sync data\Lucas\Baca AQ.rtf"
"f:\wd sync data\Lucas\My name is Yuyun.rtf"
"f:\wd sync data\My name is Yuyun.rtf"
"f:\wd_windows_tools\Adobe\Baca AQ.rtf"
"f:\wd_windows_tools\Adobe\My name is Yuyun.rtf"
"f:\wd_windows_tools\Baca AQ.rtf"
"f:\wd_windows_tools\Documentation\Baca AQ.rtf"
"f:\wd_windows_tools\Documentation\My name is Yuyun.rtf"
"f:\wd_windows_tools\EULA\Baca AQ.rtf"
"f:\wd_windows_tools\EULA\My name is Yuyun.rtf"
"f:\wd_windows_tools\Google\Baca AQ.rtf"
"f:\wd_windows_tools\Google\My name is Yuyun.rtf"
"f:\wd_windows_tools\My name is Yuyun.rtf"
"f:\wdsync\Baca AQ.rtf"
"f:\wdsync\My name is Yuyun.rtf"
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\desinfectlogs\Baca AQ.rtf
c:\desinfectlogs\My name is Yuyun.rtf
c:\dokumente und einstellungen\Baca AQ.rtf
c:\dokumente und einstellungen\Default User\Baca AQ.rtf
c:\dokumente und einstellungen\Default User\My name is Yuyun.rtf
c:\dokumente und einstellungen\LocalService\Baca AQ.rtf
c:\dokumente und einstellungen\LocalService\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Ableton\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AdobeStockPhotos\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Alcohol 120%\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Audible\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Audible\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Aufzeichnungen\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\AVStation Premium\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\CyberLink\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DivX Movies\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Downloads\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Downloads\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\DVDVideoSoft\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Bilder\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Musik\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Eigene Videos\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Filme\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Filme\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Heroes of Newerth\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\licenses\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\licenses\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Meine empfangenen Dateien\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\My Widgets\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Native Instruments\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Omegadriver2\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\readmes\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\readmes\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Traktor3\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Updater\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Updater\My name is Yuyun.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\Baca AQ.rtf
c:\dokumente und einstellungen\Lucas Deecke\Eigene Dateien\Verlauf\My name is Yuyun.rtf
c:\dokumente und einstellungen\My name is Yuyun.rtf
c:\dokumente und einstellungen\NetworkService\Baca AQ.rtf
c:\dokumente und einstellungen\NetworkService\My name is Yuyun.rtf
c:\downloads\Baca AQ.rtf
c:\downloads\My name is Yuyun.rtf
c:\dvdvideosoft\Baca AQ.rtf
c:\dvdvideosoft\My name is Yuyun.rtf
c:\dvdvideosoft\Temp\Baca AQ.rtf
c:\dvdvideosoft\Temp\My name is Yuyun.rtf
c:\installationsdateien\Baca AQ.rtf
c:\installationsdateien\My name is Yuyun.rtf
c:\installationsdateien\Omegadriver\Baca AQ.rtf
c:\installationsdateien\Omegadriver\My name is Yuyun.rtf
c:\installationsdateien\Soundtreiber DigitalMAX2\Baca AQ.rtf
c:\installationsdateien\Soundtreiber DigitalMAX2\My name is Yuyun.rtf
c:\installationsdateien\WirelasscardDriver\Baca AQ.rtf
c:\installationsdateien\WirelasscardDriver\My name is Yuyun.rtf
c:\intel\Baca AQ.rtf
c:\intel\My name is Yuyun.rtf
c:\programme\Ableton\Baca AQ.rtf
c:\programme\Ableton\My name is Yuyun.rtf
c:\programme\Adobe\Baca AQ.rtf
c:\programme\Adobe\My name is Yuyun.rtf
c:\programme\Alcohol\Baca AQ.rtf
c:\programme\Alcohol\My name is Yuyun.rtf
c:\programme\Analog Devices\Baca AQ.rtf
c:\programme\Analog Devices\My name is Yuyun.rtf
c:\programme\Apple Software Update\Baca AQ.rtf
c:\programme\Apple Software Update\My name is Yuyun.rtf
c:\programme\ATI Technologies\Baca AQ.rtf
c:\programme\ATI Technologies\My name is Yuyun.rtf
c:\programme\Audacity\Baca AQ.rtf
c:\programme\Audacity\My name is Yuyun.rtf
c:\programme\AVIcodec\Baca AQ.rtf
c:\programme\AVIcodec\My name is Yuyun.rtf
c:\programme\Avira\Baca AQ.rtf
c:\programme\Avira\My name is Yuyun.rtf
c:\programme\AVOne\Baca AQ.rtf
c:\programme\AVOne\My name is Yuyun.rtf
c:\programme\Bonjour\About Bonjour.rtf
c:\programme\Bonjour\Baca AQ.rtf
c:\programme\Bonjour\My name is Yuyun.rtf
c:\programme\Broadcom\Baca AQ.rtf
c:\programme\Broadcom\My name is Yuyun.rtf
c:\programme\CCleaner\Baca AQ.rtf
c:\programme\CCleaner\My name is Yuyun.rtf
c:\programme\Cubase LE\Baca AQ.rtf
c:\programme\Cubase LE\My name is Yuyun.rtf
c:\programme\Cubase\Baca AQ.rtf
c:\programme\Cubase\My name is Yuyun.rtf
c:\programme\CyberLink\Baca AQ.rtf
c:\programme\CyberLink\My name is Yuyun.rtf
c:\programme\Daemontools Light\Baca AQ.rtf
c:\programme\Daemontools Light\My name is Yuyun.rtf
c:\programme\dBpoweramp\Baca AQ.rtf
c:\programme\dBpoweramp\My name is Yuyun.rtf
c:\programme\devolo\Baca AQ.rtf
c:\programme\devolo\My name is Yuyun.rtf
c:\programme\DivX\Baca AQ.rtf
c:\programme\DivX\My name is Yuyun.rtf
c:\programme\File Scanner Library (Spybot - Search & Destroy)\Baca AQ.rtf
c:\programme\File Scanner Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
c:\programme\FlashFXP\Baca AQ.rtf
c:\programme\FlashFXP\My name is Yuyun.rtf
c:\programme\Fraps\Baca AQ.rtf
c:\programme\Fraps\My name is Yuyun.rtf
c:\programme\Free Audio Converter\Baca AQ.rtf
c:\programme\Free Audio Converter\My name is Yuyun.rtf
c:\programme\GameOS\Baca AQ.rtf
c:\programme\GameOS\My name is Yuyun.rtf
c:\programme\Google\Baca AQ.rtf
c:\programme\Google\My name is Yuyun.rtf
c:\programme\Hewlett-Packard\Baca AQ.rtf
c:\programme\Hewlett-Packard\My name is Yuyun.rtf
c:\programme\HP\Baca AQ.rtf
c:\programme\HP\My name is Yuyun.rtf
c:\programme\ICQ\Baca AQ.rtf
c:\programme\ICQ\My name is Yuyun.rtf
c:\programme\IEEE 802.11 WIRELESS LAN\Baca AQ.rtf
c:\programme\IEEE 802.11 WIRELESS LAN\My name is Yuyun.rtf
c:\programme\Illustrate\Baca AQ.rtf
c:\programme\Illustrate\My name is Yuyun.rtf
c:\programme\Image-Line\Baca AQ.rtf
c:\programme\Image-Line\My name is Yuyun.rtf
c:\programme\InstallShield Installation Information\Baca AQ.rtf
c:\programme\InstallShield Installation Information\My name is Yuyun.rtf
c:\programme\Intel\Baca AQ.rtf
c:\programme\Intel\My name is Yuyun.rtf
c:\programme\Internet Explorer\Baca AQ.rtf
c:\programme\Internet Explorer\My name is Yuyun.rtf
c:\programme\iPod\Acknowledgements.rtf
c:\programme\iPod\Baca AQ.rtf
c:\programme\iPod\My name is Yuyun.rtf
c:\programme\IrfanView\Baca AQ.rtf
c:\programme\IrfanView\My name is Yuyun.rtf
c:\programme\iTunes\Acknowledgements.rtf
c:\programme\iTunes\Baca AQ.rtf
c:\programme\iTunes\My name is Yuyun.rtf
c:\programme\Java\Baca AQ.rtf
c:\programme\Java\My name is Yuyun.rtf
c:\programme\K-Lite Codec Pack\Baca AQ.rtf
c:\programme\K-Lite Codec Pack\Info\readme.rtf
c:\programme\K-Lite Codec Pack\My name is Yuyun.rtf
c:\programme\Lavasoft\Baca AQ.rtf
c:\programme\Lavasoft\My name is Yuyun.rtf
c:\programme\LimeWire\Baca AQ.rtf
c:\programme\LimeWire\My name is Yuyun.rtf
c:\programme\Logitech\Baca AQ.rtf
c:\programme\Logitech\My name is Yuyun.rtf
c:\programme\Macromedia\Baca AQ.rtf
c:\programme\Macromedia\My name is Yuyun.rtf
c:\programme\MagicISO\Baca AQ.rtf
c:\programme\MagicISO\My name is Yuyun.rtf
c:\programme\Malwarebytes' Anti-Malware\Baca AQ.rtf
c:\programme\Malwarebytes' Anti-Malware\My name is Yuyun.rtf
c:\programme\Medieval CUE Splitter\Baca AQ.rtf
c:\programme\Medieval CUE Splitter\My name is Yuyun.rtf
c:\programme\Messenger Plus!\Baca AQ.rtf
c:\programme\Messenger Plus!\My name is Yuyun.rtf
c:\programme\Messenger\Baca AQ.rtf
c:\programme\Messenger\My name is Yuyun.rtf
c:\programme\Microsoft CAPICOM 2.1.0.2\Baca AQ.rtf
c:\programme\Microsoft CAPICOM 2.1.0.2\My name is Yuyun.rtf
c:\programme\microsoft frontpage\Baca AQ.rtf
c:\programme\microsoft frontpage\My name is Yuyun.rtf
c:\programme\Microsoft SQL Server\Baca AQ.rtf
c:\programme\Microsoft SQL Server\My name is Yuyun.rtf
c:\programme\mIRC\Baca AQ.rtf
c:\programme\mIRC\My name is Yuyun.rtf
c:\programme\Misc. Support Library (Spybot - Search & Destroy)\Baca AQ.rtf
c:\programme\Misc. Support Library (Spybot - Search & Destroy)\My name is Yuyun.rtf
c:\programme\Movie Maker\Baca AQ.rtf
c:\programme\Movie Maker\My name is Yuyun.rtf
c:\programme\Mozilla Firefox\Baca AQ.rtf
c:\programme\Mozilla Firefox\My name is Yuyun.rtf
c:\programme\Mozilla Sunbird\Baca AQ.rtf
c:\programme\Mozilla Sunbird\My name is Yuyun.rtf
c:\programme\Mozilla Thunderbird\Baca AQ.rtf
c:\programme\Mozilla Thunderbird\My name is Yuyun.rtf
c:\programme\MSN Gaming Zone\Baca AQ.rtf
c:\programme\MSN Gaming Zone\My name is Yuyun.rtf
c:\programme\MSXML 4.0\Baca AQ.rtf
c:\programme\MSXML 4.0\My name is Yuyun.rtf
c:\programme\MultiRes\Baca AQ.rtf
c:\programme\MultiRes\My name is Yuyun.rtf
c:\programme\Native Instruments\Baca AQ.rtf
c:\programme\Native Instruments\My name is Yuyun.rtf
c:\programme\NetMeeting\Baca AQ.rtf
c:\programme\NetMeeting\My name is Yuyun.rtf
c:\programme\OpenOffice.org 2.2\Baca AQ.rtf
c:\programme\OpenOffice.org 2.2\My name is Yuyun.rtf
c:\programme\OpenOffice.org 2.4\Baca AQ.rtf
c:\programme\OpenOffice.org 2.4\My name is Yuyun.rtf
c:\programme\OpenOffice.org 3\Baca AQ.rtf
c:\programme\OpenOffice.org 3\My name is Yuyun.rtf
c:\programme\Opera\Baca AQ.rtf
c:\programme\Opera\My name is Yuyun.rtf
c:\programme\Orbitdownloader\Baca AQ.rtf
c:\programme\Orbitdownloader\My name is Yuyun.rtf
c:\programme\Outlook Express\Baca AQ.rtf
c:\programme\Outlook Express\My name is Yuyun.rtf
c:\programme\Phoenix Technologies Ltd\Baca AQ.rtf
c:\programme\Phoenix Technologies Ltd\My name is Yuyun.rtf
c:\programme\PIC\Baca AQ.rtf
c:\programme\PIC\My name is Yuyun.rtf
c:\programme\QuickTime\Baca AQ.rtf
c:\programme\QuickTime\My name is Yuyun.rtf
c:\programme\Radeon Omega Driver\Baca AQ.rtf
c:\programme\Radeon Omega Driver\My name is Yuyun.rtf
c:\programme\Rapid Evolution\Baca AQ.rtf
c:\programme\Rapid Evolution\My name is Yuyun.rtf
c:\programme\RegCleaner\Baca AQ.rtf
c:\programme\RegCleaner\My name is Yuyun.rtf
c:\programme\Samsung\Baca AQ.rtf
c:\programme\Samsung\My name is Yuyun.rtf
c:\programme\SDHelper (Spybot - Search & Destroy)\Baca AQ.rtf
c:\programme\SDHelper (Spybot - Search & Destroy)\My name is Yuyun.rtf
c:\programme\Skype\Baca AQ.rtf
c:\programme\Skype\My name is Yuyun.rtf
c:\programme\Sony Vegas\Baca AQ.rtf
c:\programme\Sony Vegas\My name is Yuyun.rtf
c:\programme\Sony\Baca AQ.rtf
c:\programme\Sony\My name is Yuyun.rtf
c:\programme\Sound Forge\Baca AQ.rtf
c:\programme\Sound Forge\My name is Yuyun.rtf
c:\programme\Spybot - Search & Destroy\Baca AQ.rtf
c:\programme\Spybot - Search & Destroy\My name is Yuyun.rtf
c:\programme\SRS Labs\Baca AQ.rtf
c:\programme\SRS Labs\My name is Yuyun.rtf
c:\programme\Syncrosoft\Baca AQ.rtf
c:\programme\Syncrosoft\LCC\Release Notes.rtf
c:\programme\Syncrosoft\My name is Yuyun.rtf
c:\programme\Teamspeak2\Baca AQ.rtf
c:\programme\Teamspeak2\My name is Yuyun.rtf
c:\programme\TeaTimer (Spybot - Search & Destroy)\Baca AQ.rtf
c:\programme\TeaTimer (Spybot - Search & Destroy)\My name is Yuyun.rtf
c:\programme\Tortun\Baca AQ.rtf
c:\programme\Tortun\My name is Yuyun.rtf
c:\programme\Uninstall Information\Baca AQ.rtf
c:\programme\Uninstall Information\My name is Yuyun.rtf
c:\programme\VideoLAN\Baca AQ.rtf
c:\programme\VideoLAN\My name is Yuyun.rtf
c:\programme\WaveLab\Baca AQ.rtf
c:\programme\WaveLab\My name is Yuyun.rtf
c:\programme\Western Digital\Baca AQ.rtf
c:\programme\Western Digital\My name is Yuyun.rtf
c:\programme\Winamp\Baca AQ.rtf
c:\programme\Winamp\My name is Yuyun.rtf
c:\programme\Windows Live\Baca AQ.rtf
c:\programme\Windows Live\My name is Yuyun.rtf
c:\programme\Windows Media Connect 2\Baca AQ.rtf
c:\programme\Windows Media Connect 2\My name is Yuyun.rtf
c:\programme\Windows Media Player\Baca AQ.rtf
c:\programme\Windows Media Player\My name is Yuyun.rtf
c:\programme\Windows NT\Baca AQ.rtf
c:\programme\Windows NT\My name is Yuyun.rtf
c:\programme\WindowsUpdate\Baca AQ.rtf
c:\programme\WindowsUpdate\My name is Yuyun.rtf
c:\programme\Winrar\Baca AQ.rtf
c:\programme\Winrar\My name is Yuyun.rtf
c:\programme\xerox\Baca AQ.rtf
c:\programme\xerox\My name is Yuyun.rtf
c:\programme\Xvid\Baca AQ.rtf
c:\programme\Xvid\My name is Yuyun.rtf
c:\programme\Yahoo!\Baca AQ.rtf
c:\programme\Yahoo!\My name is Yuyun.rtf
c:\programme\Youtube Converter\Baca AQ.rtf
c:\programme\Youtube Converter\My name is Yuyun.rtf
c:\programme\Zero G Registry\Baca AQ.rtf
c:\programme\Zero G Registry\My name is Yuyun.rtf
c:\temp\Baca AQ.rtf
c:\temp\My name is Yuyun.rtf
c:\windows\$hf_mig$\Baca AQ.rtf
c:\windows\$hf_mig$\My name is Yuyun.rtf
c:\windows\$MSI31Uninstall_KB893803v2$\Baca AQ.rtf
c:\windows\$MSI31Uninstall_KB893803v2$\My name is Yuyun.rtf
c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\Baca AQ.rtf
c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\My name is Yuyun.rtf
c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\Baca AQ.rtf
c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB834707$\Baca AQ.rtf
c:\windows\$NtUninstallKB834707$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB867282$\Baca AQ.rtf
c:\windows\$NtUninstallKB867282$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB873339$\Baca AQ.rtf
c:\windows\$NtUninstallKB873339$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB883523$\Baca AQ.rtf
c:\windows\$NtUninstallKB883523$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB884575$\Baca AQ.rtf
c:\windows\$NtUninstallKB884575$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB885250$\Baca AQ.rtf
c:\windows\$NtUninstallKB885250$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB885835$\Baca AQ.rtf
c:\windows\$NtUninstallKB885835$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB885836$\Baca AQ.rtf
c:\windows\$NtUninstallKB885836$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB886185$\Baca AQ.rtf
c:\windows\$NtUninstallKB886185$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB887472$\Baca AQ.rtf
c:\windows\$NtUninstallKB887472$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB888113$\Baca AQ.rtf
c:\windows\$NtUninstallKB888113$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB888302$\Baca AQ.rtf
c:\windows\$NtUninstallKB888302$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB890046$\Baca AQ.rtf
c:\windows\$NtUninstallKB890046$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB890175$\Baca AQ.rtf
c:\windows\$NtUninstallKB890175$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB890859$\Baca AQ.rtf
c:\windows\$NtUninstallKB890859$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB891781$\Baca AQ.rtf
c:\windows\$NtUninstallKB891781$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB893756$\Baca AQ.rtf
c:\windows\$NtUninstallKB893756$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB894391$\Baca AQ.rtf
c:\windows\$NtUninstallKB894391$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB896358$\Baca AQ.rtf
c:\windows\$NtUninstallKB896358$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB896423$\Baca AQ.rtf
c:\windows\$NtUninstallKB896423$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB896424$\Baca AQ.rtf
c:\windows\$NtUninstallKB896424$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB896428$\Baca AQ.rtf
c:\windows\$NtUninstallKB896428$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB898461$\Baca AQ.rtf
c:\windows\$NtUninstallKB898461$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB899587$\Baca AQ.rtf
c:\windows\$NtUninstallKB899587$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB899591$\Baca AQ.rtf
c:\windows\$NtUninstallKB899591$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB900485$\Baca AQ.rtf
c:\windows\$NtUninstallKB900485$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB900725$\Baca AQ.rtf
c:\windows\$NtUninstallKB900725$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB901017$\Baca AQ.rtf
c:\windows\$NtUninstallKB901017$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB901214$\Baca AQ.rtf
c:\windows\$NtUninstallKB901214$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB902400$\Baca AQ.rtf
c:\windows\$NtUninstallKB902400$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB904706$\Baca AQ.rtf
c:\windows\$NtUninstallKB904706$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB904942$\Baca AQ.rtf
c:\windows\$NtUninstallKB904942$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB905414$\Baca AQ.rtf
c:\windows\$NtUninstallKB905414$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB905749$\Baca AQ.rtf
c:\windows\$NtUninstallKB905749$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB908519$\Baca AQ.rtf
c:\windows\$NtUninstallKB908519$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB908531$\Baca AQ.rtf
c:\windows\$NtUninstallKB908531$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB910437$\Baca AQ.rtf
c:\windows\$NtUninstallKB910437$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB911280$\Baca AQ.rtf
c:\windows\$NtUninstallKB911280$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB911562$\Baca AQ.rtf
c:\windows\$NtUninstallKB911562$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB911564$\Baca AQ.rtf
c:\windows\$NtUninstallKB911564$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB911567$\Baca AQ.rtf
c:\windows\$NtUninstallKB911567$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB911927$\Baca AQ.rtf
c:\windows\$NtUninstallKB911927$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB912919$\Baca AQ.rtf
c:\windows\$NtUninstallKB912919$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB913580$\Baca AQ.rtf
c:\windows\$NtUninstallKB913580$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB914388$\Baca AQ.rtf
c:\windows\$NtUninstallKB914388$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB914389$\Baca AQ.rtf
c:\windows\$NtUninstallKB914389$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB914440$\Baca AQ.rtf
c:\windows\$NtUninstallKB914440$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB915865$\Baca AQ.rtf
c:\windows\$NtUninstallKB915865$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB916595$\Baca AQ.rtf
c:\windows\$NtUninstallKB916595$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB917344$\Baca AQ.rtf
c:\windows\$NtUninstallKB917344$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB917422$\Baca AQ.rtf
c:\windows\$NtUninstallKB917422$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB917734_WMP10$\Baca AQ.rtf
c:\windows\$NtUninstallKB917734_WMP10$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB917953$\Baca AQ.rtf
c:\windows\$NtUninstallKB917953$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB918118$\Baca AQ.rtf
c:\windows\$NtUninstallKB918118$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB918439$\Baca AQ.rtf
c:\windows\$NtUninstallKB918439$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB918899$\Baca AQ.rtf
c:\windows\$NtUninstallKB918899$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB919007$\Baca AQ.rtf
c:\windows\$NtUninstallKB919007$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920213$\Baca AQ.rtf
c:\windows\$NtUninstallKB920213$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920214$\Baca AQ.rtf
c:\windows\$NtUninstallKB920214$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920670$\Baca AQ.rtf
c:\windows\$NtUninstallKB920670$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920683$\Baca AQ.rtf
c:\windows\$NtUninstallKB920683$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920685$\Baca AQ.rtf
c:\windows\$NtUninstallKB920685$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB920872$\Baca AQ.rtf
c:\windows\$NtUninstallKB920872$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB921398$\Baca AQ.rtf
c:\windows\$NtUninstallKB921398$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB921503$\Baca AQ.rtf
c:\windows\$NtUninstallKB921503$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB921883$\Baca AQ.rtf
c:\windows\$NtUninstallKB921883$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB922582$\Baca AQ.rtf
c:\windows\$NtUninstallKB922582$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB922616$\Baca AQ.rtf
c:\windows\$NtUninstallKB922616$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB922760$\Baca AQ.rtf
c:\windows\$NtUninstallKB922760$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB922819$\Baca AQ.rtf
c:\windows\$NtUninstallKB922819$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923191$\Baca AQ.rtf
c:\windows\$NtUninstallKB923191$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923414$\Baca AQ.rtf
c:\windows\$NtUninstallKB923414$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923561$\Baca AQ.rtf
c:\windows\$NtUninstallKB923561$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923689$\Baca AQ.rtf
c:\windows\$NtUninstallKB923689$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923694$\Baca AQ.rtf
c:\windows\$NtUninstallKB923694$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB923980$\Baca AQ.rtf
c:\windows\$NtUninstallKB923980$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB924191$\Baca AQ.rtf
c:\windows\$NtUninstallKB924191$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB924270$\Baca AQ.rtf
c:\windows\$NtUninstallKB924270$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB924496$\Baca AQ.rtf
c:\windows\$NtUninstallKB924496$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB924667$\Baca AQ.rtf
c:\windows\$NtUninstallKB924667$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB925398_WMP64$\Baca AQ.rtf
c:\windows\$NtUninstallKB925398_WMP64$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB925454$\Baca AQ.rtf
c:\windows\$NtUninstallKB925454$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB925486$\Baca AQ.rtf
c:\windows\$NtUninstallKB925486$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB925902$\Baca AQ.rtf
c:\windows\$NtUninstallKB925902$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB926239$\Baca AQ.rtf
c:\windows\$NtUninstallKB926239$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB926255$\Baca AQ.rtf
c:\windows\$NtUninstallKB926255$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB926436$\Baca AQ.rtf
c:\windows\$NtUninstallKB926436$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB927779$\Baca AQ.rtf
c:\windows\$NtUninstallKB927779$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB927802$\Baca AQ.rtf
c:\windows\$NtUninstallKB927802$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB927891$\Baca AQ.rtf
c:\windows\$NtUninstallKB927891$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB928090$\Baca AQ.rtf
c:\windows\$NtUninstallKB928090$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB928255$\Baca AQ.rtf
c:\windows\$NtUninstallKB928255$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB928843$\Baca AQ.rtf
c:\windows\$NtUninstallKB928843$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB929123$\Baca AQ.rtf
c:\windows\$NtUninstallKB929123$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB929338$\Baca AQ.rtf
c:\windows\$NtUninstallKB929338$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB929399$\Baca AQ.rtf
c:\windows\$NtUninstallKB929399$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB929969$\Baca AQ.rtf
c:\windows\$NtUninstallKB929969$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB930178$\Baca AQ.rtf
c:\windows\$NtUninstallKB930178$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB930916$\Baca AQ.rtf
c:\windows\$NtUninstallKB930916$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB931261$\Baca AQ.rtf
c:\windows\$NtUninstallKB931261$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB931768$\Baca AQ.rtf
c:\windows\$NtUninstallKB931768$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB931784$\Baca AQ.rtf
c:\windows\$NtUninstallKB931784$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB931836$\Baca AQ.rtf
c:\windows\$NtUninstallKB931836$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB932168$\Baca AQ.rtf
c:\windows\$NtUninstallKB932168$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB932823-v3$\Baca AQ.rtf
c:\windows\$NtUninstallKB932823-v3$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB933360$\Baca AQ.rtf
c:\windows\$NtUninstallKB933360$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB933566$\Baca AQ.rtf
c:\windows\$NtUninstallKB933566$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB933729$\Baca AQ.rtf
c:\windows\$NtUninstallKB933729$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB935839$\Baca AQ.rtf
c:\windows\$NtUninstallKB935839$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB935840$\Baca AQ.rtf
c:\windows\$NtUninstallKB935840$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB936021$\Baca AQ.rtf
c:\windows\$NtUninstallKB936021$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB936357$\Baca AQ.rtf
c:\windows\$NtUninstallKB936357$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB936782_WMP11$\Baca AQ.rtf
c:\windows\$NtUninstallKB936782_WMP11$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB937143$\Baca AQ.rtf
c:\windows\$NtUninstallKB937143$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB938127$\Baca AQ.rtf
c:\windows\$NtUninstallKB938127$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB938464$\Baca AQ.rtf
c:\windows\$NtUninstallKB938464$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB938828$\Baca AQ.rtf
c:\windows\$NtUninstallKB938828$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB938829$\Baca AQ.rtf
c:\windows\$NtUninstallKB938829$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB939653$\Baca AQ.rtf
c:\windows\$NtUninstallKB939653$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB939683$\Baca AQ.rtf
c:\windows\$NtUninstallKB939683$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB941202$\Baca AQ.rtf
c:\windows\$NtUninstallKB941202$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB941568$\Baca AQ.rtf
c:\windows\$NtUninstallKB941568$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB941569$\Baca AQ.rtf
c:\windows\$NtUninstallKB941569$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB941644$\Baca AQ.rtf
c:\windows\$NtUninstallKB941644$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB941693$\Baca AQ.rtf
c:\windows\$NtUninstallKB941693$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB942615$\Baca AQ.rtf
c:\windows\$NtUninstallKB942615$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB942763$\Baca AQ.rtf
c:\windows\$NtUninstallKB942763$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB942840$\Baca AQ.rtf
c:\windows\$NtUninstallKB942840$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB943055$\Baca AQ.rtf
c:\windows\$NtUninstallKB943055$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB943460$\Baca AQ.rtf
c:\windows\$NtUninstallKB943460$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB943485$\Baca AQ.rtf
c:\windows\$NtUninstallKB943485$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB944533$\Baca AQ.rtf
c:\windows\$NtUninstallKB944533$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB944653$\Baca AQ.rtf
c:\windows\$NtUninstallKB944653$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB945553$\Baca AQ.rtf
c:\windows\$NtUninstallKB945553$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB946026$\Baca AQ.rtf
c:\windows\$NtUninstallKB946026$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB946627$\Baca AQ.rtf
c:\windows\$NtUninstallKB946627$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB946648$\Baca AQ.rtf
c:\windows\$NtUninstallKB946648$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB948590$\Baca AQ.rtf
c:\windows\$NtUninstallKB948590$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB948881$\Baca AQ.rtf
c:\windows\$NtUninstallKB948881$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB950749$\Baca AQ.rtf
c:\windows\$NtUninstallKB950749$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB950760$\Baca AQ.rtf
c:\windows\$NtUninstallKB950760$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB950762$\Baca AQ.rtf
c:\windows\$NtUninstallKB950762$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB950974$\Baca AQ.rtf
c:\windows\$NtUninstallKB950974$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951066$\Baca AQ.rtf
c:\windows\$NtUninstallKB951066$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951072-v2$\Baca AQ.rtf
c:\windows\$NtUninstallKB951072-v2$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951376-v2$\Baca AQ.rtf
c:\windows\$NtUninstallKB951376-v2$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951376$\Baca AQ.rtf
c:\windows\$NtUninstallKB951376$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951698$\Baca AQ.rtf
c:\windows\$NtUninstallKB951698$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB951748$\Baca AQ.rtf
c:\windows\$NtUninstallKB951748$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB952004$\Baca AQ.rtf
c:\windows\$NtUninstallKB952004$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB952069_WM9$\Baca AQ.rtf
c:\windows\$NtUninstallKB952069_WM9$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB952287$\Baca AQ.rtf
c:\windows\$NtUninstallKB952287$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB952954$\Baca AQ.rtf
c:\windows\$NtUninstallKB952954$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB953839$\Baca AQ.rtf
c:\windows\$NtUninstallKB953839$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB954154_WM11$\Baca AQ.rtf
c:\windows\$NtUninstallKB954154_WM11$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB954211$\Baca AQ.rtf
c:\windows\$NtUninstallKB954211$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB954600$\Baca AQ.rtf
c:\windows\$NtUninstallKB954600$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB955069$\Baca AQ.rtf
c:\windows\$NtUninstallKB955069$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB955839$\Baca AQ.rtf
c:\windows\$NtUninstallKB955839$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB956391$\Baca AQ.rtf
c:\windows\$NtUninstallKB956391$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB956572$\Baca AQ.rtf
c:\windows\$NtUninstallKB956572$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB956802$\Baca AQ.rtf
c:\windows\$NtUninstallKB956802$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB956803$\Baca AQ.rtf
c:\windows\$NtUninstallKB956803$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB956841$\Baca AQ.rtf
c:\windows\$NtUninstallKB956841$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB957095$\Baca AQ.rtf
c:\windows\$NtUninstallKB957095$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB957097$\Baca AQ.rtf
c:\windows\$NtUninstallKB957097$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB958644$\Baca AQ.rtf
c:\windows\$NtUninstallKB958644$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB958687$\Baca AQ.rtf
c:\windows\$NtUninstallKB958687$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB958690$\Baca AQ.rtf
c:\windows\$NtUninstallKB958690$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB959426$\Baca AQ.rtf
c:\windows\$NtUninstallKB959426$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB959772_WM11$\Baca AQ.rtf
c:\windows\$NtUninstallKB959772_WM11$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB960225$\Baca AQ.rtf
c:\windows\$NtUninstallKB960225$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB960715$\Baca AQ.rtf
c:\windows\$NtUninstallKB960715$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB960803$\Baca AQ.rtf
c:\windows\$NtUninstallKB960803$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB961373$\Baca AQ.rtf
c:\windows\$NtUninstallKB961373$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB961501$\Baca AQ.rtf
c:\windows\$NtUninstallKB961501$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB967715$\Baca AQ.rtf
c:\windows\$NtUninstallKB967715$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB968537$\Baca AQ.rtf
c:\windows\$NtUninstallKB968537$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB969898$\Baca AQ.rtf
c:\windows\$NtUninstallKB969898$\My name is Yuyun.rtf
c:\windows\$NtUninstallKB970238$\Baca AQ.rtf
c:\windows\$NtUninstallKB970238$\My name is Yuyun.rtf
c:\windows\$NtUninstallMSCompPackV1$\Baca AQ.rtf
c:\windows\$NtUninstallMSCompPackV1$\My name is Yuyun.rtf
c:\windows\$NtUninstallWdf01005$\Baca AQ.rtf
c:\windows\$NtUninstallWdf01005$\My name is Yuyun.rtf
c:\windows\$NtUninstallWMFDist11$\Baca AQ.rtf
c:\windows\$NtUninstallWMFDist11$\My name is Yuyun.rtf
c:\windows\$NtUninstallwmp11$\Baca AQ.rtf
c:\windows\$NtUninstallwmp11$\My name is Yuyun.rtf
c:\windows\$NtUninstallWudf01000$\Baca AQ.rtf
c:\windows\$NtUninstallWudf01000$\My name is Yuyun.rtf
c:\windows\.jagex_cache_32\Baca AQ.rtf
c:\windows\.jagex_cache_32\My name is Yuyun.rtf
c:\windows\addins\Baca AQ.rtf
c:\windows\addins\My name is Yuyun.rtf
c:\windows\amana_asset\Baca AQ.rtf
c:\windows\amana_asset\My name is Yuyun.rtf
c:\windows\AppPatch\Baca AQ.rtf
c:\windows\AppPatch\My name is Yuyun.rtf
c:\windows\assembly\Baca AQ.rtf
c:\windows\assembly\My name is Yuyun.rtf
c:\windows\Baca AQ.rtf
c:\windows\Config\Baca AQ.rtf
c:\windows\Config\My name is Yuyun.rtf
c:\windows\Connection Wizard\Baca AQ.rtf
c:\windows\Connection Wizard\My name is Yuyun.rtf
c:\windows\Cursors\Baca AQ.rtf
c:\windows\Cursors\My name is Yuyun.rtf
c:\windows\Debug\Baca AQ.rtf
c:\windows\Debug\My name is Yuyun.rtf
c:\windows\Docs\Baca AQ.rtf
c:\windows\Docs\My name is Yuyun.rtf
c:\windows\Downloaded Installations\Baca AQ.rtf
c:\windows\Downloaded Installations\My name is Yuyun.rtf
c:\windows\Downloaded Program Files\Baca AQ.rtf
c:\windows\Downloaded Program Files\My name is Yuyun.rtf
c:\windows\Driver Cache\Baca AQ.rtf
c:\windows\Driver Cache\My name is Yuyun.rtf
c:\windows\Fonts\Baca AQ.rtf
c:\windows\Fonts\My name is Yuyun.rtf
c:\windows\Help\Baca AQ.rtf
c:\windows\Help\My name is Yuyun.rtf
c:\windows\I386_old\Baca AQ.rtf
c:\windows\I386_old\My name is Yuyun.rtf
c:\windows\ie7updates\Baca AQ.rtf
c:\windows\ie7updates\My name is Yuyun.rtf
c:\windows\ime\Baca AQ.rtf
c:\windows\ime\My name is Yuyun.rtf
c:\windows\inf\Baca AQ.rtf
c:\windows\inf\My name is Yuyun.rtf
c:\windows\Installer\Baca AQ.rtf
c:\windows\Installer\My name is Yuyun.rtf
c:\windows\java\Baca AQ.rtf
c:\windows\java\My name is Yuyun.rtf
c:\windows\Logs\Baca AQ.rtf
c:\windows\Logs\My name is Yuyun.rtf
c:\windows\Media\Baca AQ.rtf
c:\windows\Media\My name is Yuyun.rtf
c:\windows\Microsoft.NET\Baca AQ.rtf
c:\windows\Microsoft.NET\Framework\v1.1.4322\EULA.rtf
c:\windows\Microsoft.NET\My name is Yuyun.rtf
c:\windows\Minidump\Baca AQ.rtf
c:\windows\Minidump\My name is Yuyun.rtf
c:\windows\msagent\Baca AQ.rtf
c:\windows\msagent\My name is Yuyun.rtf
c:\windows\msapps\Baca AQ.rtf
c:\windows\msapps\My name is Yuyun.rtf
c:\windows\mui\Baca AQ.rtf
c:\windows\mui\My name is Yuyun.rtf
c:\windows\My name is Yuyun.rtf
c:\windows\network diagnostic\Baca AQ.rtf
c:\windows\network diagnostic\My name is Yuyun.rtf
c:\windows\Offline Web Pages\Baca AQ.rtf
c:\windows\Offline Web Pages\My name is Yuyun.rtf
c:\windows\Options\Baca AQ.rtf
c:\windows\Options\My name is Yuyun.rtf
c:\windows\pchealth\Baca AQ.rtf
c:\windows\pchealth\My name is Yuyun.rtf
c:\windows\PeerNet\Baca AQ.rtf
c:\windows\PeerNet\My name is Yuyun.rtf
c:\windows\PIF\Baca AQ.rtf
c:\windows\PIF\My name is Yuyun.rtf
c:\windows\Prefetch\Baca AQ.rtf
c:\windows\Prefetch\My name is Yuyun.rtf
c:\windows\Provisioning\Baca AQ.rtf
c:\windows\Provisioning\My name is Yuyun.rtf
c:\windows\pss\Baca AQ.rtf
c:\windows\pss\My name is Yuyun.rtf
c:\windows\RegisteredPackages\Baca AQ.rtf
c:\windows\RegisteredPackages\My name is Yuyun.rtf
c:\windows\Registration\Baca AQ.rtf
c:\windows\Registration\My name is Yuyun.rtf
c:\windows\repair\Baca AQ.rtf
c:\windows\repair\My name is Yuyun.rtf
c:\windows\Resources\Baca AQ.rtf
c:\windows\Resources\My name is Yuyun.rtf
c:\windows\SBM\Baca AQ.rtf
c:\windows\SBM\My name is Yuyun.rtf
c:\windows\SEC\Baca AQ.rtf
c:\windows\SEC\My name is Yuyun.rtf
c:\windows\security\Baca AQ.rtf
c:\windows\security\My name is Yuyun.rtf
c:\windows\SoftwareDistribution\Baca AQ.rtf
c:\windows\SoftwareDistribution\My name is Yuyun.rtf
c:\windows\srchasst\Baca AQ.rtf
c:\windows\srchasst\My name is Yuyun.rtf
c:\windows\Sun\Baca AQ.rtf
c:\windows\Sun\My name is Yuyun.rtf
c:\windows\system\Baca AQ.rtf
c:\windows\system\My name is Yuyun.rtf
c:\windows\system32\Baca AQ.rtf
c:\windows\system32\My name is Yuyun.rtf
c:\windows\twain_32\Baca AQ.rtf
c:\windows\twain_32\My name is Yuyun.rtf
c:\windows\UMediaPlayerActiveXPlugin\Baca AQ.rtf
c:\windows\UMediaPlayerActiveXPlugin\My name is Yuyun.rtf
c:\windows\usb-audio.deMaya44\Baca AQ.rtf
c:\windows\usb-audio.deMaya44\My name is Yuyun.rtf
c:\windows\WBEM\Baca AQ.rtf
c:\windows\WBEM\My name is Yuyun.rtf
c:\windows\Web\Baca AQ.rtf
c:\windows\Web\My name is Yuyun.rtf
c:\windows\WinSxS\Baca AQ.rtf
c:\windows\WinSxS\My name is Yuyun.rtf
f:\.trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\Baca AQ.rtf
f:\.trash-500\files\07b5db509f921ce7b4f4c931f4ebd1cf\My name is Yuyun.rtf
f:\.trash-500\files\Baca AQ.rtf
f:\.trash-500\files\c.traff\Action Plans\Baca AQ.rtf
f:\.trash-500\files\c.traff\Action Plans\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Baca AQ.rtf
f:\.trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\Baca AQ.rtf
f:\.trash-500\files\c.traff\edu forum follow-up and stakeholders' forum planning\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Eduacational Forum Planning\Baca AQ.rtf
f:\.trash-500\files\c.traff\Eduacational Forum Planning\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\intro for new volunteers\Baca AQ.rtf
f:\.trash-500\files\c.traff\intro for new volunteers\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Minutes from Meetings\Baca AQ.rtf
f:\.trash-500\files\c.traff\Minutes from Meetings\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Resources\Baca AQ.rtf
f:\.trash-500\files\c.traff\Resources\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Schools' Programme\Baca AQ.rtf
f:\.trash-500\files\c.traff\Schools' Programme\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Senya Beraku Questionnaires\Baca AQ.rtf
f:\.trash-500\files\c.traff\Senya Beraku Questionnaires\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Winneba project\Baca AQ.rtf
f:\.trash-500\files\c.traff\Winneba project\My name is Yuyun.rtf
f:\.trash-500\files\c.traff\Yeji materials\Baca AQ.rtf
f:\.trash-500\files\c.traff\Yeji materials\My name is Yuyun.rtf
f:\.trash-500\files\curice\Baca AQ.rtf
f:\.trash-500\files\curice\My name is Yuyun.rtf
f:\.trash-500\files\My name is Yuyun.2.rtf
f:\.trash-500\files\My name is Yuyun.rtf
f:\.trash-500\files\SVETEJEBLO\Baca AQ.rtf
f:\.trash-500\files\SVETEJEBLO\My name is Yuyun.rtf
f:\.trash-500\files\TUGOMOJAAA\Baca AQ.rtf
f:\.trash-500\files\TUGOMOJAAA\My name is Yuyun.rtf
f:\9ja\annette cookey\Baca AQ.rtf
f:\9ja\annette cookey\My name is Yuyun.rtf
f:\9ja\Baca AQ.rtf
f:\9ja\bigiano\Baca AQ.rtf
f:\9ja\bigiano\My name is Yuyun.rtf
f:\9ja\Idibia\Baca AQ.rtf
f:\9ja\Idibia\My name is Yuyun.rtf
f:\9ja\iyanya's single\Baca AQ.rtf
f:\9ja\iyanya's single\My name is Yuyun.rtf
f:\9ja\kelli hansom\Baca AQ.rtf
f:\9ja\kelli hansom\My name is Yuyun.rtf
f:\9ja\M.I\Baca AQ.rtf
f:\9ja\M.I\My name is Yuyun.rtf
f:\adobe audition softs\Baca AQ.rtf
f:\adobe audition softs\My name is Yuyun.rtf
f:\alkoholu\Baca AQ.rtf
f:\alkoholu\My name is Yuyun.rtf
f:\b03230418097ce8b3b\amd64\Baca AQ.rtf
f:\b03230418097ce8b3b\amd64\My name is Yuyun.rtf
f:\b03230418097ce8b3b\Baca AQ.rtf
f:\b03230418097ce8b3b\i386\Baca AQ.rtf
f:\b03230418097ce8b3b\i386\My name is Yuyun.rtf
f:\b03230418097ce8b3b\My name is Yuyun.rtf
f:\documentation\ARA\Baca AQ.rtf
f:\documentation\ARA\My name is Yuyun.rtf
f:\documentation\Baca AQ.rtf
f:\documentation\CHS\Baca AQ.rtf
f:\documentation\CHS\My name is Yuyun.rtf
f:\documentation\CHT\Baca AQ.rtf
f:\documentation\CHT\My name is Yuyun.rtf
f:\documentation\CZE\Baca AQ.rtf
f:\documentation\CZE\My name is Yuyun.rtf
f:\documentation\DAN\Baca AQ.rtf
f:\documentation\DAN\My name is Yuyun.rtf
f:\documentation\DEU\Baca AQ.rtf
f:\documentation\DEU\My name is Yuyun.rtf
f:\documentation\ENG\Baca AQ.rtf
f:\documentation\ENG\My name is Yuyun.rtf
f:\documentation\ESN\Baca AQ.rtf
f:\documentation\ESN\My name is Yuyun.rtf
f:\documentation\FIN\Baca AQ.rtf
f:\documentation\FIN\My name is Yuyun.rtf
f:\documentation\FRA\Baca AQ.rtf
f:\documentation\FRA\My name is Yuyun.rtf
f:\documentation\GRE\Baca AQ.rtf
f:\documentation\GRE\My name is Yuyun.rtf
f:\documentation\ITA\Baca AQ.rtf
f:\documentation\ITA\My name is Yuyun.rtf
f:\documentation\JPN\Baca AQ.rtf
f:\documentation\JPN\My name is Yuyun.rtf
f:\documentation\KOR\Baca AQ.rtf
f:\documentation\KOR\My name is Yuyun.rtf
f:\documentation\My name is Yuyun.rtf
f:\documentation\NLD\Baca AQ.rtf
f:\documentation\NLD\My name is Yuyun.rtf
f:\documentation\NOR\Baca AQ.rtf
f:\documentation\NOR\My name is Yuyun.rtf
f:\documentation\POL\Baca AQ.rtf
f:\documentation\POL\My name is Yuyun.rtf
f:\documentation\POR\Baca AQ.rtf
f:\documentation\POR\My name is Yuyun.rtf
f:\documentation\RUS\Baca AQ.rtf
f:\documentation\RUS\My name is Yuyun.rtf
f:\documentation\SLO\Baca AQ.rtf
f:\documentation\SLO\My name is Yuyun.rtf
f:\documentation\SWE\Baca AQ.rtf
f:\documentation\SWE\My name is Yuyun.rtf
f:\documentation\TUR\Baca AQ.rtf
f:\documentation\TUR\My name is Yuyun.rtf
f:\festplatte\Anwendungen\Baca AQ.rtf
f:\festplatte\Anwendungen\My name is Yuyun.rtf
f:\festplatte\Baca AQ.rtf
f:\festplatte\Dokumentationen\Baca AQ.rtf
f:\festplatte\Dokumentationen\My name is Yuyun.rtf
f:\festplatte\Filme\Baca AQ.rtf
f:\festplatte\Filme\My name is Yuyun.rtf
f:\festplatte\Installationsdateien\Baca AQ.rtf
f:\festplatte\Installationsdateien\My name is Yuyun.rtf
f:\festplatte\Musik\Baca AQ.rtf
f:\festplatte\Musik\My name is Yuyun.rtf
f:\festplatte\My name is Yuyun.rtf
f:\festplatte\Serien\Baca AQ.rtf
f:\festplatte\Serien\My name is Yuyun.rtf
f:\system volume information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\Baca AQ.rtf
f:\system volume information\_restore{17F77629-099D-4B86-A7B9-8B48C490F424}\My name is Yuyun.rtf
f:\system volume information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\Baca AQ.rtf
f:\system volume information\_restore{422DDE03-DACA-4944-9E1A-8CB32CC3A585}\My name is Yuyun.rtf
f:\system volume information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\Baca AQ.rtf
f:\system volume information\_restore{47511286-A78A-4CFA-BE81-4781BC7A0549}\My name is Yuyun.rtf
f:\system volume information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\Baca AQ.rtf
f:\system volume information\_restore{4CDC47E0-F463-419A-B29E-003C0D69DDF8}\My name is Yuyun.rtf
f:\system volume information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\Baca AQ.rtf
f:\system volume information\_restore{5AE03AEE-BEFE-4756-85FC-1E267BEE64D3}\My name is Yuyun.rtf
f:\system volume information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\Baca AQ.rtf
f:\system volume information\_restore{7CE1C993-B5B1-4385-AF3D-F6F9AB5BCD63}\My name is Yuyun.rtf
f:\system volume information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\Baca AQ.rtf
f:\system volume information\_restore{B56F56AF-A59A-40E7-AB65-79C2D9170267}\My name is Yuyun.rtf
f:\system volume information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\Baca AQ.rtf
f:\system volume information\_restore{B575708B-8F86-49BB-9E1F-447593B80D79}\My name is Yuyun.rtf
f:\system volume information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\Baca AQ.rtf
f:\system volume information\_restore{B9DEF940-67B8-4325-983D-09412CF0AB5C}\My name is Yuyun.rtf
f:\system volume information\Baca AQ.rtf
f:\system volume information\My name is Yuyun.rtf
f:\usb 2.0 driver\Baca AQ.rtf
f:\usb 2.0 driver\My name is Yuyun.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\Baca AQ.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\Baca AQ.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\My name is Yuyun.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\My name is Yuyun.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\Baca AQ.rtf
f:\usb 2.0 driver\S-1-5-31-1286970278978-5713669491-166975984-320\tlsr\My name is Yuyun.rtf
f:\wd sync data\Baca AQ.rtf
f:\wd sync data\Lucas\Baca AQ.rtf
f:\wd sync data\Lucas\My name is Yuyun.rtf
f:\wd sync data\My name is Yuyun.rtf
f:\wd_windows_tools\Adobe\Baca AQ.rtf
f:\wd_windows_tools\Adobe\My name is Yuyun.rtf
f:\wd_windows_tools\Baca AQ.rtf
f:\wd_windows_tools\Documentation\Baca AQ.rtf
f:\wd_windows_tools\Documentation\My name is Yuyun.rtf
f:\wd_windows_tools\EULA\Baca AQ.rtf
f:\wd_windows_tools\EULA\My name is Yuyun.rtf
f:\wd_windows_tools\Google\Baca AQ.rtf
f:\wd_windows_tools\Google\My name is Yuyun.rtf
f:\wd_windows_tools\My name is Yuyun.rtf
f:\wdsync\Baca AQ.rtf
f:\wdsync\My name is Yuyun.rtf

.
((((((((((((((((((((((( Dateien erstellt von 2010-03-19 bis 2010-04-19 ))))))))))))))))))))))))))))))
.

2010-04-19 09:20 . 2010-04-19 09:38 -------- d-----w- C:\Combo-Fix
2010-04-18 10:31 . 2010-04-18 10:31 -------- d-----w- c:\programme\ERUNT
2010-04-13 15:43 . 2010-04-13 16:44 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\QuickScan
2010-04-13 15:43 . 2010-04-13 15:58 670696 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
2010-04-13 15:43 . 2010-04-13 15:58 833960 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
2010-04-13 15:35 . 2010-04-13 15:35 -------- d-----w- C:\_OTL
2010-04-13 12:43 . 2010-04-13 12:43 5918776 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-04-12 17:31 . 2010-04-12 17:31 -------- d---a-w- C:\INFECTED
2010-04-01 10:10 . 2010-04-01 10:10 -------- d-----r- c:\dokumente und einstellungen\LocalService\Eigene Dateien
2010-03-30 14:16 . 2010-03-30 14:16 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Opera
2010-03-30 14:08 . 2010-04-19 20:12 -------- d-----w- c:\programme\Opera
2010-03-30 13:41 . 2010-03-30 13:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Avira
2010-03-30 13:38 . 2010-03-01 09:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-30 13:38 . 2010-02-16 13:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-30 13:38 . 2009-05-11 11:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-03-30 13:38 . 2009-05-11 11:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-03-30 13:38 . 2010-04-19 20:12 -------- d-----w- c:\programme\Avira
2010-03-30 13:38 . 2010-03-30 13:38 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-19 20:13 . 2008-04-06 14:19 -------- d--h--w- c:\programme\Zero G Registry
2010-04-19 20:13 . 2009-07-20 18:38 -------- d-----w- c:\programme\Youtube Converter
2010-04-19 20:13 . 2008-03-04 20:36 -------- d-----w- c:\programme\Yahoo!
2010-04-19 20:13 . 2007-03-11 20:02 -------- d-----w- c:\programme\Xvid
2010-04-19 19:18 . 2010-03-03 14:28 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Orbit
2010-04-19 14:23 . 2009-02-09 05:45 1 ----a-w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-19 11:58 . 2005-08-30 17:19 84978 ----a-w- c:\windows\system32\perfc007.dat
2010-04-19 11:58 . 2005-08-30 17:19 439676 ----a-w- c:\windows\system32\perfh007.dat
2010-04-14 20:28 . 2009-11-30 12:12 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\vlc
2010-04-14 18:42 . 2006-12-06 15:45 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\uTorrent
2010-04-01 09:01 . 2010-03-31 18:37 529 ----a-w- c:\programme\Gemeinsame Dateien\Blizzard Entertainment.lnk
2010-04-01 09:01 . 2010-03-31 18:37 525 ----a-w- c:\programme\Gemeinsame Dateien\Adobe Systems Shared.lnk
2010-04-01 09:01 . 2010-03-31 18:37 501 ----a-w- c:\programme\Gemeinsame Dateien\AVSMedia.lnk
2010-04-01 09:01 . 2010-03-31 18:37 495 ----a-w- c:\programme\Gemeinsame Dateien\Apple.lnk
2010-04-01 09:01 . 2010-03-31 18:37 495 ----a-w- c:\programme\Gemeinsame Dateien\Adobe.lnk
2010-04-01 09:01 . 2010-03-31 18:37 531 ----a-w- c:\programme\Gemeinsame Dateien\New Harry Potter and....lnk
2010-04-01 09:00 . 2010-03-31 18:37 521 ----a-w- c:\programme\Apple Software Update.lnk
2010-04-01 09:00 . 2010-03-31 18:37 507 ----a-w- c:\programme\Analog Devices.lnk
2010-04-01 09:00 . 2010-03-31 18:37 525 ----a-w- c:\programme\New Harry Potter and....lnk
2010-04-01 09:00 . 2010-03-31 18:37 493 ----a-w- c:\programme\Alcohol.lnk
2010-04-01 09:00 . 2010-03-31 18:37 493 ----a-w- c:\programme\Ableton.lnk
2010-04-01 09:00 . 2010-03-31 18:37 489 ----a-w- c:\programme\Adobe.lnk
2010-04-01 08:56 . 2010-04-01 08:34 509 ----a-w- c:\windows\Fonts\New Harry Potter and....lnk
2010-03-30 00:46 . 2010-01-03 18:19 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-30 00:45 . 2010-01-03 18:19 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-28 20:25 . 2009-12-26 17:41 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\dvdcss
2010-03-26 14:39 . 2007-04-20 22:27 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2010-03-03 16:36 . 2010-03-03 16:36 -------- d-----w- c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\GrabPro
2009-12-23 10:44 . 2009-12-23 10:44 0 ----a-w- c:\programme\Malware
2004-08-04 14:00 . 2006-11-10 23:41 413696 ----a-w- c:\programme\mozilla firefox\plugins\msvcp60.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-04-19_09.35.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-05-26 02:16 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2010-04-19 17:02 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2010-04-19 17:02 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
- 2005-08-30 17:18 . 2010-04-14 06:01 71488 c:\windows\system32\perfc009.dat
+ 2005-08-30 17:18 . 2010-04-19 11:58 71488 c:\windows\system32\perfc009.dat
+ 2005-08-30 08:30 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2005-08-30 17:18 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2005-08-30 17:18 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2005-08-30 08:30 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2005-08-30 17:18 . 2010-04-19 11:58 424052 c:\windows\system32\perfh009.dat
- 2005-08-30 17:18 . 2010-04-14 06:01 424052 c:\windows\system32\perfh009.dat
+ 2008-03-05 13:10 . 2009-08-06 17:23 215920 c:\windows\system32\muweb.dll
+ 2008-03-05 13:10 . 2009-08-06 17:23 274288 c:\windows\system32\mucltui.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2005-08-30 08:30 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2005-08-30 08:30 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2005-08-30 08:30 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
+ 2005-08-30 08:30 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\programme\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-07-27 1388544]
"RestoreIT!"="c:\programme\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" [2004-09-23 114688]
"MagicKeyboard"="c:\programme\SAMSUNG\MagicKBD\PreMKBD.exe" [2005-04-11 151552]
"RemoteControl"="c:\programme\CyberLink\PowerDVD\PDVDServ.exe" [2004-03-16 32768]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-12-10 49152]
"BatteryManager"="c:\programme\Samsung\Samsung Battery Manager\BatteryManager.exe" [2005-08-18 1933312]
"AtiPTA"="atiptaxx.exe" [2006-02-22 344064]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\dokumente und einstellungen\Lucas Deecke\Startmen\Programme\Autostart\
Adobe Gamma.lnk - c:\programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Logitech SetPoint.lnk - c:\programme\Logitech\SetPoint\SetPoint.exe [2006-11-1 434176]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[BU]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\FlashFXP\\FlashFXP.exe"=
"c:\\Dokumente und Einstellungen\\Lucas Deecke\\Desktop\\utorrent.exe"=
"c:\\Programme\\mIRC\\mirc.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programme\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Mozilla Firefox\\firefox.exe"=
"c:\\Programme\\devolo\\informer\\devinf.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Orbitdownloader\\orbitdm.exe"=
"c:\\Programme\\Orbitdownloader\\orbitnet.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R0 RITCPT;RITCPT;c:\windows\system32\drivers\RITCPT.SYS [30.08.2005 10:44 43512]
R2 antivirschedulerservice;Avira AntiVir Scheduler;c:\programme\Avira\AntiVir Desktop\sched.exe [30.03.2010 15:38 135336]
R2 DOSMEMIO;MEMIO;c:\windows\system32\MEMIO.SYS [30.08.2005 10:43 4300]
R2 FBAPI;FBAPI;c:\windows\system32\drivers\FBAPI.sys [30.08.2005 10:44 5088]
R2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\system32\drivers\npf_devolo.sys [28.11.2008 15:34 35840]
R3 wowfilter;WOW XT Filter Driver;c:\windows\system32\drivers\WOWFilter.sys [08.06.2005 16:58 17792]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [20.04.2007 09:31 717296]
S2 SNM WLAN Service;SNM WLAN Service;c:\programme\Samsung\Samsung Network Manager\SNMWLANService.exe [28.05.2005 08:35 36864]
S3 a4djavs;a4djavs;c:\windows\system32\drivers\a4djavs.sys [08.07.2009 11:57 35216]
S3 a4djusb;a4djusb;c:\windows\system32\drivers\a4djusb.sys [08.07.2009 11:57 226576]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [18.03.2009 23:12 16512]
S3 MAYA44;usb-audio.de driver for Maya44;c:\windows\system32\drivers\Maya44.sys [26.06.2008 17:26 325344]
S3 pgusbmme;usb-audio.de MME-Adapter;c:\windows\system32\drivers\pgusbmm3.sys [26.06.2008 17:26 23360]
.
Inhalt des "geplante Tasks" Ordners

2010-04-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
IE: &download by arles download manager - c:\dokumente und einstellungen\Lucas Deecke\Lokale Einstellungen\Anwendungsdaten\Ariel Download Manager\ADM.htm
IE: &download by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/201
IE: &grab video by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/204
IE: do&wnload selected by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/203
IE: down&load all by orbit - c:\programme\Orbitdownloader\orbitmxt.dll/202
FF - ProfilePath - c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\
FF - prefs.js: browser.search.selectedEngine - LEO Deu-Eng
FF - component: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
FF - component: c:\programme\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabXpcom.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
FF - plugin: c:\dokumente und einstellungen\Lucas Deecke\Anwendungsdaten\Mozilla\Firefox\Profiles\uji55t96.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071303000004.dll
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npUMediaPlayer.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npyaxmpb.dll

---- FIREFOX Richtlinien ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\programme\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\programme\Mozilla Firefox\defaults\pref\activex.js - pref("capability.policy.default.ClassID.CIDFE0BD779-44EE-4A4B-AA2E-743C63F2E5E6", "AllAccess");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-19 22:15
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(1020)
c:\windows\system32\Ati2evxx.dll
.
Zeit der Fertigstellung: 2010-04-19 22:18:15
ComboFix-quarantined-files.txt 2010-04-19 20:18
ComboFix2.txt 2010-04-19 16:22
ComboFix3.txt 2010-04-19 09:37

Vor Suchlauf: 1.547.567.104 Bytes frei
Nach Suchlauf: 1.512.886.272 Bytes frei

- - End Of File - - 92E47E2CF0650B54AA31EF2077D8765D

  • 0

#14
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 10,160 posts
That log looks clear. How is it doing?
  • 0

#15
ldeecke

ldeecke

    Member

  • Member
  • PipPip
  • 21 posts
The external drive works flawless. I am very happy with that, thank you first of all.

However, Yuyun_Cantix created shortcuts to all the folders on the drive (F:\). I attach a picture to emphasize what I mean by that.

IMG 1.1
Posted Image

The files don't strike me as harmful; However, they are annoying.

Can you think of any approach to a solution?
  • 0




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured